Fix CD publish failure by excluding private workspaces from Lerna publish

[Copilot]

The cd GitHub Actions job failed in the stable publish stage with lerna ERR! E404 Not found while running lerna publish from-package. The failure was caused by private/unpublished workspace packages being considered during publish resolution.

• Root cause

  • lerna publish from-package in cd.yml could include private workspace packages in publish checks, which can trigger npm E404 during release flows.

• Change

  • Added --no-private to all Lerna publish steps in .github/workflows/cd.yml:
    • alpha (--dist-tag=alpha)
    • preview (--dist-tag=beta)
    • rc (--dist-tag=rc)
    • stable (default dist-tag)

• Resulting behavior

  • Release publishing remains unchanged for public packages.
  • Private workspace packages are excluded consistently across all release channels, reducing publish-time E404 failures.

- name: publish stable npm packages to npmjs.org
  if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.preid == 'stable' }}
  run: |
    npx lerna publish from-package --yes --no-private