build(release): publish the dsh family publicly

Every release member now declares publishConfig.access: public, so the scope no
longer mixes levels: the 221 packages/*/* and apps/* manifests join the vendored
framework and the native packages.

check-workspace-constraints drops the per-sequence expectation and holds every
release member to public, which is what stops a member from drifting back.

Access is a property of the package, not of a version: the dsh packages already
published as restricted become world-readable at their next publication.

packages/shell/bash-local/package.json

@@ -3,7 +3,7 @@
   "description": "Local-subprocess implementation of the DeepSeek Harness bash executor seam",
   "version": "0.1.0-rc.3",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

packages/shell/bash-sandbox/package.json

@@ -3,7 +3,7 @@
   "description": "Sandbox-consuming implementation of the DeepSeek Harness bash executor seam (confines every command via ctx.sandbox, reports denial/enforcement result facts)",
   "version": "0.1.0-rc.3",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

packages/shell/pwsh-local/package.json

@@ -3,7 +3,7 @@
   "description": "Local PowerShell implementation of the DeepSeek Harness bash executor seam",
   "version": "0.1.0-rc.3",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

packages/shell/pwsh-sandbox/package.json

@@ -3,7 +3,7 @@
   "description": "Sandbox-consuming implementation of the DeepSeek Harness PowerShell executor seam (confines every command via ctx.sandbox, reports denial/enforcement result facts)",
   "version": "0.1.0-rc.3",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

packages/shell/shell-env/package.json

@@ -3,7 +3,7 @@
   "description": "Tool-independent managed DSH_* shell environment registry",
   "version": "0.1.0-rc.3",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

packages/shell/shell/package.json

@@ -3,7 +3,7 @@
   "description": "Abstract bash executor seam (ctx.shell) for the DeepSeek Harness",
   "version": "0.1.0-rc.3",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

packages/shell/tool-bash-persistent/package.json

@@ -3,7 +3,7 @@
   "description": "Model-facing owner-scoped persistent Bash tool backed by the Harness PTY service",
   "version": "0.1.0-rc.3",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

packages/shell/tool-bash/package.json

@@ -3,7 +3,7 @@
   "description": "Model-facing bash tool with optional generic background-job and sandbox-escalation support",
   "version": "0.1.0-rc.3",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

packages/shell/tool-pwsh/package.json

@@ -3,7 +3,7 @@
   "description": "Model-facing pwsh tool over the bash executor seam",
   "version": "0.1.0-rc.3",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",