feat(release): split vscode bump + prebuild core/types; release 3.0.3

[amrmelsayed]

Summary

Two commits:

1. feat(release): split vscode bump into standalone script + prebuild core/types — tooling
2. chore(vscode): release 3.0.3 — promotes ## [Unreleased] → ## [3.0.3] - 2026-05-13 in packages/vscode/CHANGELOG.md so the next Marketplace publish shows release notes for the 3.0.3 already in packages/vscode/package.json

Tooling changes (commit 1)

• New scripts/bump-vscode.sh (and pnpm bump-vscode-version alias) that handles vscode versioning + CHANGELOG promotion as a single standalone operation. Defaults to patch bump from vscode's own current version; accepts patch/minor/major/explicit. Refuses pre-release versions (Marketplace constraint).
• scripts/bump-all.sh delegates the vscode step to the new script, passing the lockstep version explicitly so no double-bump occurs. Pre-release lockstep bumps still skip vscode entirely.
• vscode:prepublish extended to pnpm --filter @cluesmith/codev-core --filter @cluesmith/codev-types build && pnpm package. The vscode bundle inlines code from those workspace dist/ directories (esbuild + bundle: true); without this prebuild a stale dist/ could ship into the .vsix. Same staleness class as prepublishOnly on the npm side, just for vsce.
• Release protocol step 4 updated with a note about the standalone script.

Marketplace changelog policy

Promoted [Unreleased] heading becomes [X.Y.Z] - YYYY-MM-DD. No fresh [Unreleased] heading is inserted — the next PR with notes adds one back. Keeps the published Marketplace changelog free of empty sections (Vue/Babel-style).

Test plan

• pnpm bump-version (lockstep) bumps root + 4 packages and promotes vscode CHANGELOG
• pnpm bump-version 3.5.0-rc.1 (lockstep RC) bumps root/codev/core/types; vscode + CHANGELOG untouched
• pnpm bump-vscode-version (standalone default patch) bumps only vscode + CHANGELOG
• pnpm bump-vscode-version 3.5.0 (standalone explicit) bumps to explicit
• pnpm bump-vscode-version 3.5.0-rc.1 (standalone pre-release) refused with clear error
• pnpm vscode:prepublish builds core + types before esbuild, produces a clean production bundle
• First actual pnpm vscode:publish after this PR merges

[waleedkadous]

Excellent catch, thank you! The vscode:prepublish fix plugs a real bug class I missed in the lockstep review — prepublishOnly on core/types doesn't fire for vsce bundling, so esbuild could have inlined stale dist/ into the .vsix. And the CHANGELOG promotion unblocks the next marketplace publish (would have shipped empty release notes otherwise). Clean delegation in bump-all, well-tested. Approving and merging.