New publish-shim redirect logic for Artifacts

Publish now checks via isPublishShim whether the target is a publish shim pointing at a different real artifact. If so, it resolves and validates the actual shim target, including whether its source is a bound copy, before proceeding with the write.