fix(release): support npm 12 in ClawHub materializer (#114008)

scripts/materialize-clawhub-cli.sh

@@ -38,12 +38,16 @@ clawhub_integrity="$(
   exit 1
 }
 
-npm ci \
-  --prefix "${destination}" \
-  --ignore-scripts \
-  --no-audit \
-  --no-fund \
-  --omit=dev
+# npm 12 misvalidates the lockfile root when this project is selected with --prefix.
+# Running inside the copied project keeps its committed root metadata authoritative.
+(
+  cd "${destination}"
+  npm ci \
+    --ignore-scripts \
+    --no-audit \
+    --no-fund \
+    --omit=dev
+)
 
 clawhub_version="$(
   CLAWHUB_CLI_ROOT="${destination}" \

test/scripts/plugin-clawhub-new-workflow.test.ts

@@ -334,6 +334,8 @@ describe("Plugin ClawHub New workflow", () => {
       version: "0.23.1",
     });
     expect(materializerSource).toContain("npm ci");
+    expect(materializerSource).toContain('cd "${destination}"');
+    expect(materializerSource).not.toContain('--prefix "${destination}"');
     expect(materializerSource).toContain("--ignore-scripts");
     expect(materializerSource).toContain("--omit=dev");
     expect(materializerSource).toContain(