[ci] Gate worker CLI versions on npm availability

[sjchmiela]

We currently:

• publish to NPM without awaiting the release being ready and public
• immediately change cli-versions.json
• this makes builds immediately try to use a new eas-cli version despite it NOT being public yet, which causes problems, see Datadog.

This pull request makes it so we:

• publish to NPM, make a GitHub release
• update changelog and push to main
• await NPM readiness for 10 minutes (last release took 6)
• only once it's ready, update cli-versions.json.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 65.46%. Comparing base (eebe02e) to head (b37f589).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #4313   +/-   ##
=======================================
  Coverage   65.46%   65.46%           
=======================================
  Files        1060     1060           
  Lines       49291    49291           
  Branches    10427    10427           
=======================================
  Hits        32264    32264           
  Misses      16911    16911           
  Partials      116      116           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

⏩ The changelog entry check has been skipped since the "no changelog" label is present.