fix(release): extend ClawHub publication wait

[sjungwon03]

Summary

• extend post-submit ClawHub public verification from 12 × 10 seconds to 36 × 10 seconds
• lock both attempt count and delay in the release contract
• preserve exactly one skill publish mutation and all fail-closed validation

Incident basis

v0.2.4 received documented pending-publication; the original 12-check workflow timed out before public propagation. No retry submission occurred. A later GET-only public endpoint check verified the exact immutable api-to-typemcp@0.2.4.

Guardrails

• no tag/release/registry mutation is performed by this PR
• no change to version, dependency graph, publisher, or waiter failure semantics
• non-404, malformed, mismatch, and final timeout paths remain fail-closed

Verification

• release contract: 19 tests
• runtime docs: 2 tests
• docs harness: 8 tests
• workspace validation: 3 tests
• generated-project E2E: 6 tests
• explicit one-check timeout fail-closed test
• Python compile and git diff --check
• independent review: no blocking findings

Closes #101

[sjungwon03-ai]

Reviewed exact head df5b930 against dev base 9566a57. This change only raises the post-submit public GET verification budget from 12×10s to 36×10s, with both values contract-tested. It preserves exactly one publish mutation and all fail-closed public verifier behavior. CI succeeded; unresolved review threads are zero; no tag/release/publisher/dependency changes. The v0.2.4 propagation evidence is recorded and no existing release is re-run.