ci: add GitHub Actions to publish MITRE CLI package

Automates building and publishing the patched Continue CLI:
- Builds on push to mitre branch
- Publishes to GitHub Package Registry as @mitre/continue-cli
- Creates release artifacts
- Uploads distribution tarball

Team can install via:
  npm install -g @mitre/continue-cli --registry=https://npm.pkg.github.com

Or download tarball from releases.

Authored by: Aaron Lippold <lippold@gmail.com>

Author: aaronlippold

.github/workflows/publish-mitre-cli.yml

@@ -0,0 +1,98 @@
+name: Build and Publish MITRE Continue CLI
+
+on:
+  push:
+    branches:
+      - mitre/fix-authentication-and-config-bugs
+    tags:
+      - 'mitre-v*'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  build-and-publish:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          registry-url: 'https://npm.pkg.github.com'
+          scope: '@mitre'
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Build packages
+        run: node ./scripts/build-packages.js
+
+      - name: Build CLI
+        working-directory: extensions/cli
+        run: npm run build
+
+      - name: Update package.json for GitHub registry
+        working-directory: extensions/cli
+        run: |
+          # Update package name to @mitre/continue-cli for GitHub registry
+          node -e "
+          const fs = require('fs');
+          const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+          pkg.name = '@mitre/continue-cli';
+          pkg.version = '1.0.0-mitre.' + Date.now();
+          pkg.description = 'MITRE patched Continue CLI with x-api-key authentication fix';
+          pkg.repository = {
+            type: 'git',
+            url: 'https://github.com/mitre/continue.git'
+          };
+          fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2));
+          "
+
+      - name: Publish to GitHub Packages
+        working-directory: extensions/cli
+        run: npm publish
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Create distribution tarball
+        working-directory: extensions/cli
+        run: |
+          npm pack
+          mv *.tgz continuedev-cli-mitre-patched.tgz
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: mitre-continue-cli
+          path: extensions/cli/continuedev-cli-mitre-patched.tgz
+          retention-days: 90
+
+      - name: Create Release (on tag push)
+        if: startsWith(github.ref, 'refs/tags/mitre-v')
+        uses: softprops/action-gh-release@v1
+        with:
+          files: extensions/cli/continuedev-cli-mitre-patched.tgz
+          body: |
+            MITRE Patched Continue CLI
+
+            Includes fix for x-api-key duplicate header authentication bug.
+
+            **Installation:**
+            ```bash
+            npm install -g continuedev-cli-mitre-patched.tgz
+            ```
+
+            **Or from GitHub Packages:**
+            ```bash
+            npm install -g @mitre/continue-cli@latest --registry=https://npm.pkg.github.com
+            ```
+
+            See MITRE-AIP-SOLUTION.md for complete setup instructions.
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}