ci: add ClawHub publishing and company onboarding

[Patrick-Erichsen]

This adds publishing to ClawHub so the company plugin can appear in OpenClaw’s plugin catalog. Today this repo publishes to npm only; after this change, PRs build and pack the plugin and maintainers can run Publish to ClawHub manually, with dry_run: true as the default.

The workflow builds the actual npm tarball, uploads it as an artifact, and passes it to ClawHub’s reusable workflow pinned to the v0.23.3 commit. Live runs wait for the normal security checks and definitive publication. The README covers the initial company-member token publication and subsequent secretless OIDC setup. Also supplies the missing manifest display name so ClawHub shows “Supermemory.”

The @supermemory company publisher has been created on ClawHub with existing account @MaheshtheDev as owner, using the company GitHub organization logo and bio. It is not marked official, and no package release has been published as part of this PR. Please confirm the ownership setup and add any other company maintainers who need access.

Please email me at patrick@openclaw.org to discuss the integration, verify company ownership, and make your organization official on ClawHub.

Validation / before-and-after evidence:

• Frozen-lockfile install, TypeScript check, build, npm pack, Biome 2.3.8: passed.
• ClawHub v0.23.3 inspector on the packed artifact: PASS, zero findings. Publication dry run: passed (24 files).
• actionlint and git diff --check: passed.
• Before: no ClawHub publishing workflow. After: build-and-pack checks on PRs and an explicit manual dry-run/publish path; no registry writes were performed during local validation.

[Patrick-Erichsen]

Hey @MaheshtheDev , apologies for the slop comment above.

Saw that you guys have this OpenClaw plugin and would love to get it published on ClawHub! That way we can make you guys an official org so that you show up in the plugins page within OpenClaw.