v0.36.3 — reject unpublishable OCI package shapes The MCP registry refuses an OCI package that carries registryBaseUrl, and wants the registry host inside identifier. Both are checkable against the file, and both previously surfaced as a 400 after the image push, the GitHub Release and any ClawHub publish had already succeeded.