ci: publish 1.1.0 to npm with GitHub OIDC

[Naandalist]

No NPM_TOKEN. Publish uses npm trusted publishing + GitHub OIDC.

Repo change

New workflow: .github/workflows/publish.yml

• trigger: v* tags (or manual dispatch)
• permissions.id-token: write
• yarn test / typecheck / build
• npm publish --access public (provenance is automatic with trusted publishing)

Docs: docs/PUBLISH.md

You must do this on npmjs.com before the tag will work

1. https://www.npmjs.com/package/react-native-nfc-card-scanner/access
2. Trusted Publisher → GitHub Actions
3. Exact values:
   • User: Naandalist
   • Repository: react-native-nfc-card-scanner
   • Workflow filename: publish.yml
   • Environment: empty
4. Allow npm publish. New connections after 3 Sep 2026 only allow npm stage publish unless you tick direct publish.

After this PR is merged

git checkout main && git pull
git tag v1.1.0
git push origin v1.1.0

That starts the Publish workflow. Confirm at https://www.npmjs.com/package/react-native-nfc-card-scanner (1.1.0).

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.