fix(release): put all remaining @paperclipai workspace packages on the CI release train

Enroll every @paperclipai workspace package in the calver release train and
add a fail-fast guard that rejects any publishFromCi:true package depending on
a workspace package that is not on the train, so a canary can never ship an
unresolvable dependency again (root cause of the skills-catalog break).

Also recognize .mjs/.cjs test files in the PR test-coverage gate; the repo's
script tests use .mjs and were previously invisible to the gate.

.github/scripts/check-pr-test-coverage.mjs

@@ -9,8 +9,8 @@
 import { fileURLToPath } from 'node:url';
 
 const TEST_PATTERNS = [
-  /\.test\.(ts|js|tsx|jsx)$/,
-  /\.spec\.(ts|js|tsx|jsx)$/,
+  /\.test\.(ts|js|tsx|jsx|mjs|cjs)$/,
+  /\.spec\.(ts|js|tsx|jsx|mjs|cjs)$/,
   /(?:^|\/)tests?\//,
   /\/__tests__\//,
 ];