Fixes
- Publishes the ClawHub artifact from a clean package workspace so the ClawHub CLI checkout is not bundled into the plugin archive.
- Passes the ClawHub package family explicitly for dry-run and release publishes.
- Uses authenticated ClawHub release detection so blocked owner-visible versions are not mistaken for missing public packages.
This supersedes the blocked ClawHub artifact for v0.2.16.