Developer + packaging correctness: publint, CJS smoke test, kernel tarball fix, typecheck:apps, docs version drift