feat: migrate pmg to nx based release automation (#293)

* feat: Migrate release system to Nx with platform-specific npm packages

* add go.work.sum

* fix: CI deprecations, stale action pins, and signal propagation

* fix: update e2e workflows to pnpm 11 and latest action SHAs

* fix: update pmg-e2e.yml to Node 24 with Go and pnpm caching

* fix: resolve E2E failures, remove goreleaser-test, update action SHAs

* fix: restore goreleaser-test (required check)

* fix: escape pnpm workspace detection for yarn/pnpx tests, update action versions

project.json

@@ -0,0 +1,55 @@
+{
+  "name": "pmg",
+  "root": ".",
+  "targets": {
+    "build-snapshot": {
+      "executor": "nx:run-commands",
+      "options": {
+        "command": "goreleaser build --clean --snapshot",
+        "cwd": "{workspaceRoot}"
+      },
+      "inputs": ["goWorkspaceSources"],
+      "outputs": ["{workspaceRoot}/dist"]
+    },
+    "build-release": {
+      "executor": "nx:run-commands",
+      "options": {
+        "command": "goreleaser release --clean",
+        "cwd": "{workspaceRoot}"
+      },
+      "inputs": ["goWorkspaceSources"],
+      "outputs": ["{workspaceRoot}/dist"],
+      "cache": false
+    },
+    "build-dev": {
+      "executor": "nx:noop",
+      "dependsOn": [{"projects": "@safedep/pmg", "target": "build"}]
+    },
+    "verify": {
+      "executor": "nx:run-commands",
+      "dependsOn": [{"projects": "pmg", "target": "build-dev"}],
+      "options": {
+        "command": "node packages/pmg/dist/bin.cjs version",
+        "cwd": "{workspaceRoot}"
+      }
+    },
+    "publish-npm": {
+      "executor": "nx:run-commands",
+      "dependsOn": [{"projects": "@safedep/pmg", "target": "build-release"}],
+      "options": {
+        "command": "pnpm publish -r --provenance --no-git-checks --access public",
+        "cwd": "{workspaceRoot}"
+      },
+      "cache": false
+    },
+    "release-preflight": {
+      "executor": "nx:run-commands",
+      "dependsOn": [{"projects": "pmg", "target": "verify"}],
+      "options": {
+        "command": "pnpm publish -r --dry-run --no-git-checks",
+        "cwd": "{workspaceRoot}"
+      },
+      "cache": false
+    }
+  }
+}