The registry answers a repeated trust request with 409 Conflict, which the
script counted as a failure — so a rerun of a fully configured set reported
"0 of 7 packages configured" and sent you looking for a problem that was not
there. Same idempotence publish.mjs already has.

stderr is piped to recognise the 409 and echoed straight back out; stdout stays
inherited because the browser authentication prompt is written there.