chore(release): publish credible-std to npm

[odyslam]

Summary

• add the public @phylax-systems/credible-std package manifest for the upcoming 0.8.0 release
• publish source contracts, test/backtesting support, pinned Forge/OpenZeppelin sources, and the backtesting helper while excluding examples and repository tests
• mirror credible-layer-contracts tag-driven npm trusted publishing with OIDC and provenance
• fail the release when the git tag and package version differ
• document npm installation and Foundry remappings

Validation

• all GitHub CI, PCL matrix, Socket, and CLA checks pass
• actionlint .github/workflows/release.yml
• package dry-run: 422 files, 442 KB compressed, with the expected package boundary
• published @phylax-systems/credible-std@0.8.0-bootstrap.0; public registry SHA-1 and SHA-512 integrity exactly match the inspected local artifact
• installed the public registry tarball in a fresh consumer project and compiled imports of Assertion and CredibleTestWithBacktesting with Forge
• forge build
• git diff --check

npm activation complete

• public package: https://www.npmjs.com/package/@phylax-systems/credible-std
• bootstrap version: 0.8.0-bootstrap.0 (bootstrap and temporary latest tags)
• trusted publisher: GitHub repository phylaxsystems/credible-std, workflow release.yml, publish permission enabled

After merge, pushing tag 0.8.0 will run the OIDC/provenance release and move latest to the first stable version.