Add template republish

[alexpate]

Stacked on #12 (feat/google-loyalty-design): both touch the generated files. GitHub retargets this to main when #12 merges.

What

• templates.republish(id, options?) and templates.retrieveRepublish(id, republishId) for the new platform endpoints. republish sends an Idempotency-Key (generated, or options.idempotencyKey).
• TemplateRepublish and TemplateRepublishedEvent types.
• Regenerated from the platform spec: PassDelivery.apple.retrying / google.retrying, template.republished in PASSMINT_EVENT_TYPES.
• A 429 republish_in_progress is thrown as PassmintRateLimitError straight away. The client never retries 429s, which matters because this one can last minutes. Pinned by a test.

Why

lin.ky edits venue templates and needs those edits to reach cards already issued.

Testing

lint, type-check, test (incl. 0.4.0 compat types), build, attw, publint, generate:check, test:ecosystem. openapi.json is byte-identical to the platform's origin/main. Event-type pins in unit tests, the ecosystem smoke tests and the mock server now include template.republished.

Compatibility

Minor, additive. Call shapes from 0.5.0/0.6.0 are unchanged, and PassmintEvent still describes pass events. Things to know (all in the changeset):

• PassmintEventType / Event['type'] gain template.republished, so exhaustive switches will flag it.
• PASSMINT_EVENT_TYPES gains an entry at runtime; code subscribing with [...PASSMINT_EVENT_TYPES] will receive it.
• template.republished is only sent to endpoints subscribed by name, never "*".
• Server side: pass.update_failed now fires only for permanent failures or exhausted retries; delivery.<platform>.retrying is new.

Release

Publish only after the platform deploy that serves the endpoints is live. No merge or publish without Alex.