build: enforce complete private release workflow

package.json

@@ -16,6 +16,8 @@
     "test": "bun test packages",
     "test:coverage": "bun test --coverage packages",
     "security:audit": "bun audit",
+    "release:prepare": "bun run scripts/release.ts prepare",
+    "release:private": "bun run scripts/release.ts publish",
     "test:db:live": "bash scripts/test-live-db.sh",
     "typecheck": "tsc --noEmit",
     "lint": "eslint .",