The release gate runs twice in the publish job: once as an explicit step that
sets GH_TOKEN, and again inside `npm publish` via prepublishOnly, which set
only NODE_AUTH_TOKEN. The second run could not read hosted CI and refused —
correctly, since unverifiable is not green. Authenticated rather than relaxed.