fix: add --force-local to tar in publish test for Windows compatibility

Windows drive letters (C:) get misinterpreted as remote host names by tar.

packages/cli/src/__tests__/publish-package.test.ts

@@ -24,7 +24,7 @@ async function extractPackedPackageJson(packDir: string) {
     throw new Error(`Expected exactly one tarball in ${packDir}, found ${tgzFiles.length}`);
   }
 
-  return execFileSync("tar", ["-xOf", join(packDir, tgzFiles[0]), "package/package.json"], {
+  return execFileSync("tar", ["--force-local", "-xOf", join(packDir, tgzFiles[0]), "package/package.json"], {
     cwd: workspaceRoot,
     encoding: "utf-8",
   });