fix(github): recover versioned workspace packages

[TorinAsakura]

Task

• Refs [Package] Kratos React для self-hosted Kratos #159
• Refs feat(react-kratos): upgrade Kratos client #160
• Finish npm publication of all packages versioned by the failed release batch. The existing recovery job publishes only @atls/react-kratos, which is already available as 0.1.0.
• Add an explicit choice of the six workspaces in that batch. Each choice maps to its fixed manifest path and version in source commit 9bc23729472414c56d1a0a2d67f423dec0f05cfc; the guard verifies source, package name, version, and npm absence before the existing Yarn publisher runs.

How to verify

Before fix

1. Context: the failed release batch left five versioned packages absent from npm. Action: inspect the existing manual job. Expected result: it can publish only @atls/react-kratos@0.1.0, so it cannot complete the remaining batch.

After fix

1. Context: dispatch the workflow with one of the allowed packages. Action: select @atls/react-app-links, @atls/react-identity-links, @atls/react-identity-user-provider, or @atls/react-kratos-browser-flows for 0.1.0, or @atls/tinkoff-payment-widget for 0.2.0. Expected result: the job publishes exactly that version from the pinned source without changing versions or creating another GitHub Release.
2. Context: an already-published version, an unsupported package, or a registry lookup failure. Action: run the verification step. Expected result: the job stops before publication. The already-published @atls/react-kratos@0.1.0 is rejected by the registry guard.

Proofs

• actionlint, immutable installation, and normal commit hooks passed.
• Native prepack/build succeeded for all five packages; each packed manifest has the intended name and version.
• The actual workflow guard passed for the five unpublished versions and rejected the published Kratos version and an unsupported package name.
• The source remains pinned to the existing version commit. No package publication was performed while preparing this PR.
• Original failed batch: https://github.com/atls/reactjs/actions/runs/36614597758.
• Completed publication runs: app-links, identity-links, identity-user-provider, Kratos browser flows, and payment widget.
• Public npm reports the five intended versions as latest; their gitHead, Git tag and GitHub Release target all equal 9bc23729472414c56d1a0a2d67f423dec0f05cfc. Downloaded npm archives have identical extracted contents to the verified local packages.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-29T21:29:32.215956Z	283dd59	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.