chore: bootstrap public Partner SDK

[okjodom]

Summary

• publish an API-key-only MinmoClient that is Partner-bound at construction
• vendor a checksummed SDK artifact from clean Mini commit e5a57d82556d787d0c3be677b32b7ac02f93c65a
• expose the existing Partner clients, public errors, contract types, and common enums without a private npm dependency
• add CI, Release Please, npm trusted-publishing configuration, provenance checks, and contributor/release documentation

Verification

• npm run check
• npm run test:package
• npm pack --dry-run

The packed 0.1.0 tarball contains six files, has no runtime dependencies, and was installed, executed, and type-checked from an empty consumer fixture.

Follow-up setup

• protect main after the initial CI check is registered
• add RELEASE_PLEASE_TOKEN
• bootstrap @minmo/sdk@0.1.0 with an authorized Minmo npm maintainer
• configure npm trusted publishing for minmoto/sdk and .github/workflows/release.yml