Fix Publish Envs workflow to discover environments packages

[grp06]

Summary

• Replace stale cookbook/recipes/* discovery with environments/**/pyproject.toml discovery.
• Emit a matrix of env_name, env_path, and version from package metadata.
• Publish each environment with prime env push -p "$ENV_PATH" --auto-bump while preserving the existing unchanged-content handling.

Evidence

Before, the old detector found no packages:

[]

After, the workflow detector emits ten environment entries, including nested patent-search packages. Local validation confirmed these names:

ethics-debate
opencode-harbor
advanced-patent-q-and-a
basic-patent-q-and-a
patent-technical-analysis
reverse-text
shape-detective
swe-grep
wiki-search
wordle

Validation

• Extracted and ran the actual YAML detect-envs run block locally. It wrote has_envs=true and a ten-entry matrix={"include": [...]} to $GITHUB_OUTPUT.
• Verified every emitted env_path contains a pyproject.toml.
• Ran git diff --check -- .github/workflows/publish-envs.yaml.
• Parsed .github/workflows/publish-envs.yaml with Ruby YAML.

Not run

• prime env push, because it requires repository secrets and Environments Hub publish permissions.
• actionlint, because it is not installed locally.
• uv run pre-commit run --files .github/workflows/publish-envs.yaml, because dependency resolution failed before hooks ran: the resolver reports only verifiers<=0.1.12.dev1 available while the project requires verifiers>=0.1.15.dev6.