dsh-refine v1.0.1

Fixed

• Peer range >=0.0.1-rc.3 let npm install resolve dsh-home-paths to
  0.1.0-rc.8, whose dsh-invariants peer regressed to ^0.0.1-rc.3 —
  incompatible with dsh-typert-protocol@0.1.0-rc.6's ^0.1.0-rc.6, so a
  fresh install failed with ERESOLVE. Both peers are now pinned to the
  aligned 0.1.0-rc.6 series the dsh host ships.
• Smoke test now hermetic for CI: fixture path derives from
  dshHomePath('harness'), missing engine ESP files are bootstrapped, and
  hardcoded demo-content assertions derive counts/ids from the snapshot.
  Added CI (Node 18/20/22) and npm-publish-with-provenance workflows.