v0.36.3 — reject unpublishable OCI package shapes

The MCP registry refuses an OCI package that carries registryBaseUrl, and wants
the registry host inside identifier. Both are checkable against the file, and
both previously surfaced as a 400 after the image push, the GitHub Release and
any ClawHub publish had already succeeded.