The scoped package must be published from apps/cli/release, but running npm publish at the repo root targets the private monorepo package. Add a short script that always rebuilds the release directory and publishes that target.

Constraint: npm does not dispatch bare npm p to package scripts

Rejected: Make the root package public | that would expose the monorepo tarball

Confidence: high

Scope-risk: narrow

Directive: Keep publish shortcuts pointed at apps/cli/release, not repo root

Tested: npm run publish:cli:dry-run

Tested: git diff --check