Release v1.2.5

Merge claude/streamline-setup-flow-IaEeL: onboarding overhaul + CI fixes

Includes:
- Hash-routed dashboard with 8 screens (4 create + 4 stamp), atp-stamp-agent bin,
  new .atp.json format {did, profile, quantumSafe, capabilities}, MAX_PORT_TRIES=10
- Fix CodeQL unvalidated dynamic dispatch in onboard.js router
- Fix Vercel reserved NODE_ENV in vercel.json
- Fix Jest: align @atp/shared to zod v4, migrate z.record patterns
- Version bumps: sdk 1.2.5, openclaw-atp 1.1.3, create-atp-agent 0.3.0, atp-profiles 1.0.1
- Extend npm-publish workflow to cover all 4 public packages

https://claude.ai/code/session_01RipLjtUXMyFd7m1Wwcnweu