release: prepare 3.0.0-rc.3

[aerovulpe]

Summary

• bump the corrective release candidate to 3.0.0-rc.3
• preserve rc.2 as an immutable failed publication attempt after all source verification passed
• record the corrected npm trusted-publisher identity for the renamed repository

Validation

• npm run verify
• 113 unit tests and 214 Storybook interaction/a11y tests
• packed ESM, Vite, Bundler, NodeNext, SSR, CSS, license, manifest, and Chromium web-component checks
• npm audit --audit-level=moderate (0 vulnerabilities)
• full IDE rebuild

The v3.0.0-rc.2 workflow passed verification but npm rejected the package PUT because its trusted-publisher identity had not been updated after the repository rename. No rc.2 package or GitHub Release was created. The npm setting now targets advanced-chat/advanced-chat-components and release-package.yml.