ci: gate releases on opencode payload verification

scripts/release.sh

@@ -58,6 +58,13 @@ if [[ -z "$OLD_VERSION" ]]; then
 fi
 echo "Bumping version: $OLD_VERSION -> $VERSION"
 
+# Build and verify the packaged OpenCode payload before mutating any manifest
+# versions or creating a tag. This keeps a broken npm artifact from being
+# released via the manual script path.
+echo "Verifying OpenCode build and npm pack payload..."
+node scripts/build-opencode.js
+node tests/scripts/build-opencode.test.js
+
 update_version() {
   local file="$1"
   local pattern="$2"