The verify loop did 'for svc_dir in services/*/' which walked
every services/<svc>/ on disk. Some of those (api_gateway,
cloudwatch_logs, eks, transcribe_streaming) have committed
gleam.toml + README + LICENSE from earlier sweeps but the src/
tree is .gitignored — the focused regen run before this step
only re-creates s3 / sqs / dynamodb / rds / sesv2, so gleam
build canonicalising 'services/api_gateway/src' fails with
'No such file or directory'.

Walk only the curated PUBLISHED_SERVICES list. The other
service dirs stay on disk for local test coverage but don't
gate the publish.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>