v0.23.5

Corrected follow-up release after the v0.23.4 workflow reached npm without a usable publish credential.

Highlights:

• publishes the corrected dist/bin/cuttlefish.js CLI bin path
• wires the protected npm-production credential into the provenance-enabled publish job
• updates install and release documentation now that cuttlefish-cli is public on npm

The published release triggers npm publication first, followed by platform archives and the Homebrew formula update.