feat(ci): add independent npm tag cleanup workflow

[XXPermanentXX]

Change

Add a separate Clean npm tags manual workflow so tag maintenance does not expand the Publish form. All six package checkboxes default to selected; tags accept spaces, commas, or newlines; dry-run defaults to enabled.

The cleanup runner validates the entire selection before registry requests, protects latest, preflights every selected package, skips absent tags, and verifies each deletion. It uses npm 11.21.0 OIDC authentication without a long-lived token. The existing Publish workflow is unchanged.

Validation

• vp check: 0 errors, 3 existing warnings.
• Release tooling tests: 24 passed across 5 files, including 15 cleanup tests.
• Workflow YAML parsed successfully; git diff --check passed.
• Read-only live preview resolved bailian-cli / release-test to 0.0.0-beta-75b056b-20260731.
• No npm tag deletion or package publication has been performed.

First run

After merge, preview and then delete only bailian-cli / release-test, with the other five packages deselected. Check the npm Trusted Publisher status separately: deletion success does not establish that the new connection has completed its initial validation. No beta publishing is included in this change.