feat(review-tutor): publish public package

[ElbertePlinio]

Changed

• publish @pickforge/review-tutor at the workspace lockstep version
• add public npm metadata and Node.js engine requirement
• keep the installed CLI at dist/bin.js and make the Pi peer optional
• include current resources plus the Claude Code and Codex directories landing in PR C

Tested

• npm pack --dry-run: includes dist/bin.js, extensions/review-tutor.ts, src/**/*.ts, skills/review-tutor/SKILL.md, README.md, and package.json; excludes test/, node_modules, and .tsbuildinfo
• installed the packed tarball in a temporary npm project; review-tutor --help printed usage and exited 0
• ran review-tutor worktree --no-open in a temporary Git repo; authenticated /api/state returned 200 with harnesses, then SIGTERM exited 0
• installed the temporary package path with Pi using an isolated PI_CODING_AGENT_DIR
• bun run check

Not tested

• real npm publish; the next release tag performs it

Risk class: standard

Refs #82

[ElbertePlinio]

Review (Opus, standard): package.json correct and release-safe; git+ repository url applied (46b16ab). README P1 is resolved by stacking: #84 (README install rewrite + adapters) now bases on this PR and merges before any tag, so nothing publishes with the stale README. Note for release: do not run publish.yml via workflow_dispatch before the 0.13.0 bump — the eight other packages are already at 0.12.0 and would conflict while this one would burn 0.12.0 outside a tag.

[ElbertePlinio]

Ready for human review. Rebased onto #83 at 40cbc82; CI green at ad434c0 (run 33007071022). No source changes since the review-clean head.