Remove capability publish workflow

[kapelame]

Summary

• remove Publish and Unpublish buttons, status displays, confirmation dialogs, and frontend mutation hooks
• remove publish-only backend routes, handlers, install-count logic, and visibility-based marketplace listing behavior while keeping existing database fields
• remove Deprecate and Restore UI actions while preserving historical deprecated badges and backend compatibility
• keep capability browsing workspace-scoped with workspace membership authorization and workspace ownership checks
• leave capability import, versioning, agent binding, and runtime behavior unchanged

Validation

• pnpm --filter @parsar/web typecheck
• pnpm --filter @parsar/web build
• go test ./server/internal/...
• make sqlc-generate
• PATH="$(go env GOPATH)/bin:$PATH" make openapi
• local UI verification: capability list and detail pages no longer expose Publish, Unpublish, Deprecate, or Restore actions
• local API verification: removed publish, unpublish, and install-count routes return 404