fix push-to-action: use CLI direct invocation for token acquisition

the inline `node -e` + `TOKEN=$(...)` approach broke because
`core.getIDToken()` in @actions/core writes `::debug::` and
`::add-mask::` to stdout, polluting the captured value.

`node cli.ts gha token` uses `core.setOutput()` which writes to
the $GITHUB_OUTPUT file instead of stdout.

Made-with: Cursor

package.json

@@ -1,21 +1,20 @@
 {
-  "name": "@pullfrog/pullfrog",
+  "name": "pullfrog",
   "version": "0.0.194",
   "type": "module",
+  "bin": {
+    "pullfrog": "./dist/cli.mjs",
+    "pullfrog-dev": "./dist/cli.mjs",
+    "pf": "./dist/cli.mjs"
+  },
   "files": [
-    "index.js",
-    "index.cjs",
-    "index.d.ts",
-    "index.d.cts",
-    "agents",
-    "utils",
-    "main.js",
-    "main.d.ts"
+    "dist/"
   ],
   "scripts": {
     "test": "vitest",
     "typecheck": "tsc --noEmit",
     "build": "node esbuild.config.js",
+    "check:entrypoints": "node scripts/check-entrypoint-imports.ts",
     "play": "node play.ts",
     "runtest": "node test/run.ts",
     "scratch": "node scratch.ts",
@@ -24,38 +23,39 @@
     "postinstall": "node scripts/generate-proxies.ts",
     "prepare": "cd .. && husky action/.husky"
   },
-  "dependencies": {
+  "devDependencies": {
     "@actions/core": "^1.11.1",
+    "@anthropic-ai/claude-code": "2.1.85",
     "@ark/fs": "0.56.0",
     "@ark/util": "0.56.0",
+    "@clack/prompts": "^1.2.0",
+    "@modelcontextprotocol/sdk": "^1.26.0",
     "@octokit/plugin-throttling": "^11.0.3",
     "@octokit/rest": "^22.0.0",
     "@octokit/webhooks-types": "^7.6.1",
     "@standard-schema/spec": "1.1.0",
     "@toon-format/toon": "^1.0.0",
-    "ajv": "^8.18.0",
-    "arkregex": "0.0.5",
-    "arktype": "2.2.0",
-    "dotenv": "^17.2.3",
-    "execa": "^9.6.0",
-    "fastmcp": "^3.34.0",
-    "file-type": "^21.3.0",
-    "package-manager-detector": "^1.6.0",
-    "semver": "^7.7.3",
-    "table": "^6.9.0",
-    "turndown": "^7.2.0"
-  },
-  "devDependencies": {
-    "@anthropic-ai/claude-code": "2.1.85",
-    "agent-browser": "0.21.0",
-    "@modelcontextprotocol/sdk": "^1.26.0",
     "@types/node": "^24.7.2",
     "@types/semver": "^7.7.1",
     "@types/turndown": "^5.0.5",
+    "agent-browser": "0.21.0",
+    "ajv": "^8.18.0",
     "arg": "^5.0.2",
+    "arkregex": "0.0.5",
+    "arktype": "2.2.0",
+    "dotenv": "^17.2.3",
     "esbuild": "^0.25.9",
+    "execa": "^9.6.0",
+    "fastmcp": "^3.34.0",
+    "file-type": "^21.3.0",
     "husky": "^9.0.0",
     "opencode-ai": "1.1.56",
+    "package-manager-detector": "^1.6.0",
+    "picocolors": "^1.1.1",
+    "semver": "^7.7.3",
+    "skills": "1.4.9",
+    "table": "^6.9.0",
+    "turndown": "^7.2.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.17",
     "yaml": "^2.8.2"
@@ -78,9 +78,9 @@
   "zshy": {
     "exports": "./index.ts"
   },
-  "main": "./dist/index.cjs",
+  "main": "./dist/index.js",
   "module": "./dist/index.js",
-  "types": "./dist/index.d.cts",
+  "types": "./dist/index.d.ts",
   "exports": {
     ".": {
       "@pullfrog/source": "./index.ts",