[codex] Ship prebuilt Action runtime

[Conalh]

Summary

• Remove the consumer-workflow npm ci / npm run build steps from action.yml.
• Commit the compiled dist/ runtime and make CI verify it stays current after npm run build.
• Prepare v0.1.10 install docs so pilots can use a release tag with the prebuilt runtime.

Why

External pilots should be able to trust ScopeTrail as a local-only Action without downloading development dependencies or building TypeScript inside their PR checks. This keeps the free Action easier to adopt and makes the trust boundary clearer before paid team-layer validation.

Validation

• node --test test\\action-metadata.test.mjs failed before implementation on the old install/build behavior.
• node --test test\\ci-workflow.test.mjs failed before implementation because CI did not check dist/ freshness.
• node --test test\\public-docs.test.mjs failed before implementation because trust docs did not describe the committed runtime boundary.
• npm run build
• git diff --exit-code -- dist
• git status --short -- dist
• npm test (37/37 passing)
• git diff --check