ci: add npm publish workflow with NPM_KEY

[skulidropek]

Summary

• add publish.yml for create-spawn-dock
• publish canary builds from main
• publish stable releases from v* tags
• use secrets.NPM_KEY for npm authentication

Validation

• workflow matches existing mcp-client and dev-tunnel org pattern
• package root is published from repository root, with built CLI in packages/app/dist