Adds a guard step before npm publish that checks the registry for the
current package@version and skips publishing if it already exists. Makes
tag re-pushes and workflow re-runs go green instead of 409-failing.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>