refactor(ci): consolidate publish workflows into single unified workflow

BREAKING: Replaces separate provenance.yml and publish-socketbin.yml with
single publish.yml workflow that handles everything.

- Create unified publish.yml with one-click publishing for all packages
- Build binaries in matrix, then publish all packages in sequence
- Loop over platforms instead of 8 duplicate publish steps
- Delete provenance.yml (was confusingly named "Publish Bins" for JS packages)
- Delete publish-socketbin.yml (was confusingly named "Publish CLIs" for binaries)
- Delete unused scripts/publish.mjs (thin wrapper nobody used)
- Delete scripts/check-version-consistency.mjs (no longer needed)
- Remove publish script from root package.json

New workflow options:
- publish-binaries: @socketbin/* binary packages (8 platforms)
- publish-socket: socket package
- publish-cli: @socketsecurity/cli package
- publish-cli-sentry: @socketsecurity/cli-with-sentry package
- dry-run: Build but don't publish
- version: Optional version override

Author: jdalton