fix(release): install AI dependencies before tests

[andrei-hasna]

Summary

• Install the independently locked AI companion dependencies before the release workflow runs recursive root tests.
• Advance @hasna/todos to 0.15.24, keep @hasna/todos-ai at 0.1.0, and raise its peer floor to >=0.15.24 <1.
• Update the direct peer-range regression so 0.15.23 is rejected and 0.15.24 is accepted.
• Retain the Todos AI content from the unpublished 0.15.23 release.

Tracking

• Bug task: a3f86aca-caf0-4a0d-a67a-08767a7eeeba
• Delivery root: 470e65cb-18bc-4650-a769-52e7f8acf438

Local validation

• Root and AI bun install --frozen-lockfile: pass.
• AI typecheck and build: pass.
• AI functional/export/runtime tests: 55 pass, 0 fail across four files.
• AI manifest peer-range regression: 1 pass, 0 fail.
• Root-invoked AI discovery before the regression update loaded all five AI test files with no module-resolution error.
• Root release-focused tests: 41 pass, 1 skip, 0 fail.
• Root typecheck: pass.
• Release workflow YAML parse and AI-install-before-test checks: pass.
• git diff --cached --check: pass.
• Shield staged review and staged/committed gitleaks scans: zero findings.

The local full recursive root bun test ended with rc=137 under station memory pressure after 285 of 302 test-file headers and produced no valid final summary. A later guarded full AI test command remained queued without starting tests because the box-wide lanes were occupied, so it was stopped and is recorded as unrun. Canonical remote CI must run the full matrix.

The failed annotated tag npm/todos/v0.15.23 remains unchanged at 66f0e1029b490c568dc3ba298b7213c444fea259. Adversarial review, release receipt, tagging, publishing, and installation remain unstarted for Cossus.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}