chore: v0.0.1-beta.7 — CI smoke job verifies bundle pre-install

- smoke-windows runs rsync.exe / busybox.exe directly from the workspace
  bundle, before npm install, so the test proves DLL chain integrity
  regardless of whether AV interferes with global install paths.
- Adds Defender exclusions before npm i -g.
- workflow_dispatch supported; publish step gated to only run on tag push.

Author: vikasprogrammer

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.0.1-beta.7 (2026-05-23)
+
+### Internals
+- Smoke-windows CI job now runs the bundled `rsync.exe` and `busybox.exe` directly from the workspace bundle **before** the npm-install step, so a passing smoke test proves the DLL chain is correct independent of whether antivirus interferes with the global install path.
+- Adds Windows Defender exclusions before `npm i -g` to prevent msys DLLs from being quarantined during install.
+- Publish job now skips on `workflow_dispatch` (manual triggers), so maintainers can re-test the smoke job without bumping the version.
+
 ## 0.0.1-beta.6 (2026-05-23)
 
 ### Bug Fixes (Windows)

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@instawp/cli",
-  "version": "0.0.1-beta.6",
+  "version": "0.0.1-beta.7",
   "description": "InstaWP CLI - Create and manage WordPress sites from the terminal",
   "type": "module",
   "bin": {