Release: publish codextime package

[yazmorukyaz]

Publish checklist

Public CLI repo is created and main CI is green. Branch protection, secret scanning, push protection, and Dependabot security updates are enabled.

Remaining npm steps require npm account access:

• Confirm codextime package name is still available.
• Configure npm trusted publishing for this public repo.
• Run the Publish workflow with tag next.
• Verify npx codextime@next preview.
• Verify npx codextime@next doctor.
• Verify token login/sync against production after app env/migration is live.
• Promote codextime@0.2.0 to latest.
• Publish codextime-tracker@0.1.17 from the private app repo bridge workspace.

Blocker observed from Codex environment: npm whoami returned E401 Unauthorized.