v0.65.0

Highlights\n\n- npm publish workflow now packs contextforge-*.tgz before publish.\n- GitHub artifact attestation is generated for the release tarball.\n- npm-pack.json and the tarball are uploaded with publish readiness evidence.\n- The approved publish job publishes the same packed tarball.\n- publish-readiness now reports release artifact attestation as a separate check.\n\n## Verification\n\n- PR #155 checks passed.\n- Main CI passed: https://github.com/grnbtqdbyx-create/contextforge/actions/runs/26733838067\n- Main ContextForge Audit passed: https://github.com/grnbtqdbyx-create/contextforge/actions/runs/26733838069\n