npm run bump raises distribution.json and regenerates manifests; CI fails PRs that change shipped files without a bump; merges to main tag and release new versions automatically.