Publish clean MPLP public OSS projection without release config

[jearonwong]

Summary

• publish the final clean MPLP Public OSS projection to main
• remove release-config.yaml from the public repository surface
• update RELEASE_MANIFEST.json to match the regenerated Dev-derived projection

Governance Boundary

• Source authority: Coregentis/MPLP-Protocol-Dev main
• Public target: Coregentis/MPLP-Protocol main
• PR source branch is in owner fork, so the Public repo itself keeps only main
• release-config.yaml remains Dev-side projection governance/config and is not a Public OSS artifact

Verification

• Dev repo-truth-first passed at 19211692
• generated candidate scan passed with release_config_present=false
• forbidden tracked/staged path scan passed
• local Docusaurus build passed
• no npm/PyPI publish, no GitHub Release, no tag, no seal

Forbidden Actions Preserved

• no registry mutation
• no npm dist-tag or deprecate
• no PyPI upload/yank
• no GitHub Release or tag
• no release seal
• no non-main branch in the final Public OSS repository