Publish shopify-dev-tools to Cloudsmith

[durga256]

WHY are these changes introduced?

PR #8151 moves @shopify/shopify-dev-tools into this monorepo, but the package still needs a private release path before ownership can move away from Shopify/ai-toolkit-source.

This PR adds that release path while keeping the package private, avoiding public npm, and allowing the old publisher to remain operational during migration.

WHAT is this pull request doing?

• Adds a dedicated Shopify Build pipeline that builds and packs @shopify/shopify-dev-tools, then publishes its tarball to Shopify's internal Cloudsmith node repository.
• Adds an idempotent release job for main pushes and manual shopify-dev-tools retries.
• Compares the package version with HEAD~1, checks Cloudsmith only after a version bump or manual retry, and triggers Buildkite only when that exact version is missing.
• Uses a new cli-shopify-dev-tools-publish-package pipeline slug so the existing ai-toolkit-source publisher can coexist until the migration is verified.
• Documents the package's independent Changesets versioning and private-registry release process.
• Keeps private: true and publishConfig.access: restricted; no public npm publishing is introduced.

No changeset is included because this changes release infrastructure rather than package behavior or versioned contents.

How to test your changes?

Validated locally with:

• YAML parsing for the GitHub Actions and Shopify Build configurations
• node --check bin/resolve-package-publish-state.js
• Synthetic resolver scenarios covering unchanged pushes, bumped/missing versions, already-published versions, manual retries, and missing credentials
• pnpm exec prettier --check for the changed source/configuration files
• pnpm knip
• pnpm nx lint workspace --skip-nx-cache
• pnpm nx lint shopify-dev-tools --skip-nx-cache
• pnpm nx type-check shopify-dev-tools --skip-nx-cache
• pnpm nx build shopify-dev-tools --skip-nx-cache
• pnpm --filter @shopify/shopify-dev-tools pack (approximately 20 MB tarball)

Post-release steps

• Register the new Shopify Build pipeline:
  @spy build setup cli-shopify-dev-tools-publish-package repo=Shopify/cli pr=false
• Provision or verify BUILDKITE_API_TOKEN and CLOUDSMITH_NPM_TOKEN_RO for the Release workflow.
• Keep the old Shopify/ai-toolkit-source publisher enabled until the full migration is merged and verified.

Checklist

• I've considered possible cross-platform impacts (Mac, Linux, Windows)
• I've considered possible documentation changes
• I've considered analytics changes to measure impact (not applicable to release infrastructure)
• This is not a user-facing package change, so no changeset is required

[durga256]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• Bundle shopify-dev-tools with Shopify CLI #8157
• Remove Verdict and experimentation support from shopify-dev-tools #8156
• Publish shopify-dev-tools to Cloudsmith #8152 👈 (View in Graphite)
• Test shopify-dev-tools separately in CI #8155
• Configure shopify-dev-tools for the CLI workspace #8154
• Make shopify-dev-tools self-contained #8153
• Copy shopify-dev-tools into CLI monorepo #8151
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.