fix(release): upload cli LICENSE artifact for npm publish

The build-rust job generates the merged LICENSE (with bundled dependency
notices) but only uploads dist/ as an artifact. The Release job does a
fresh checkout where the generated LICENSE doesn't exist, so pnpm
auto-copies the root MIT-only LICENSE instead.

Upload the cli LICENSE as a separate artifact and download it in the
Release job before publishing.

Author: fengmk2

.github/workflows/release.yml

@@ -160,6 +160,16 @@ jobs:
           path: ./packages/cli/skills
           if-no-files-found: error
 
+      - name: Upload LICENSE files
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        if: ${{ matrix.settings.target == 'x86_64-unknown-linux-gnu' }}
+        with:
+          name: licenses
+          path: |
+            ./packages/core/LICENSE
+            ./packages/cli/LICENSE
+          if-no-files-found: error
+
   Release:
     runs-on: ubuntu-latest
     needs: [prepare, build-rust]
@@ -212,6 +222,13 @@ jobs:
           pattern: core
           merge-multiple: true
 
+      - name: Download LICENSE files
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        with:
+          path: packages
+          pattern: licenses
+          merge-multiple: true
+
       - uses: ./.github/actions/download-rolldown-binaries
         with:
           github-token: ${{ github.token }}