v1.0.0-rc.5

Release candidate for validating the npm trusted publishing path before v1.0.0. This refresh aligns package repository metadata with npm trusted publishing requirements and keeps manifest examples at 1.0.0-rc.5.

Local gates passed before release: bun install --frozen-lockfile, bun run lint, bun run typecheck, bun test, bun run build, bun run pack:check, bun run validate, and bun run pack:smoke.