The thread was started without a wn.wg.Add(1) and blocked on
messagesOfInterestRefresh with no exit path, so it outlived Stop() for
the life of the process. Register it on the WaitGroup and let it return
when the network context is cancelled.

Found by the Go goroutine leak profile (Go 1.26 experiment, default in
1.27), which reported 43 of these blocked forever at the end of the node
package's test binary.

The new test fills messagesOfInterestRefresh after Stop and checks that
nothing drains it; it fails without the fix.

Commented out npm publish and GitHub release steps.

Docs/nodely deployment guide

Moved permissions section under the publish job.

Updated GitHub Actions to use newer versions of checkout and setup-node.

docs: address review nits on Accounts page