ci: publish with --no-git-checks and drop done cli-deps todo

.github/workflows/release.yml

@@ -29,7 +29,7 @@ jobs:
           if [[ "${GITHUB_REF_NAME}" == *"-"* ]]; then
             DIST_TAG=rc
           fi
-          pnpm publish --filter cryptgeon --tag "${DIST_TAG}"
+          pnpm publish --filter cryptgeon --tag "${DIST_TAG}" --no-git-checks
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 

docs/roadmap.md

@@ -6,7 +6,6 @@
 - Add remaining shared tooling to the pnpm catalog (`vite`, `tsdown`).
 - Move formatting, linting and type-checking + git hooks onto `vite-plus` (oxlint, oxfmt, vitest).
 - Re-add CSP (`Content-Security-Policy`) wired into the axum router (was in `csp.rs`, removed as unused).
-- Move all CLI deps to `devDependencies` — they bundle into the single output file anyway.
 
 ## Unified payload (drop the text/file union)