Authorize founder-operated npm publication while formation is pending

[gioabreu]

Aligns the repository publisher mirror and npm release gates with the live Openly Useful authority.

• keeps Openly Useful LLC formation-pending and the individual founder as current operator
• records direct founder-owner publication authorization effective during formation
• preserves RunGlance personal ownership with transferRequired: false
• makes npm readiness depend on founder authorization plus package, namespace, policy, license, notice, generated-wrapper, test, and deterministic-plan validation
• keeps provider review and future LLC operation separate from npm
• normalizes published CLI bin maps and executable modes so npm retains all commands without correcting the manifest

Validation:

• root tests: 136 total, 135 pass, 1 expected skip; Sites: 7/7
• Project Status MCP: build, typecheck, 3/3 tests
• RunGlance MCP: build, typecheck, 5/5 tests
• release-sync: 92 files, clean
• release-check: valid, distributionReady, and publishReady are true
• both prepublishOnly gates pass
• both npm publish --dry-run checks pass without manifest correction or publication
• both deterministic archive families build and verify from a clean clone