Use pnpm publish for galaxy-client and strip workspace-only postinstall

The client/ package.json now has @galaxyproject/galaxy-api-client at
workspace:* and a postinstall that filters into the workspace to build
it. npm publish doesn't rewrite the workspace: protocol, so the published
tarball would carry the literal "workspace:*" and break downstream
installs; pnpm publish substitutes the real version. The postinstall is
also workspace-only -- if it ships in the tarball, consumers' npm install
fails when pnpm --filter runs outside any workspace -- so npm pkg delete
strips it before pnpm publish runs.

Author: dannon

.github/workflows/publish_artifacts.yaml

@@ -121,7 +121,11 @@ jobs:
         working-directory: 'client'
       - name: publish client
         if: (github.event_name == 'workflow_dispatch' && inputs.release_type == 'release') || (github.event_name == 'release' && !github.event.release.prerelease)
-        run: npm publish --provenance --access public
+        # `pnpm publish` rewrites `workspace:*` deps to real versions; `npm publish` would ship the literal protocol and break downstream installs.
+        # Strip the workspace-only `postinstall` so it doesn't run in consumers' node_modules.
+        run: |
+          npm pkg delete scripts.postinstall
+          pnpm publish --provenance --access public --no-git-checks
         working-directory: 'client'
       - name: sync client-api version
         run: npm run sync-version