chore: align workflows with svelte-notifications pattern

- Drop setup-node action, use corepack only
- Change build step to package for library output
- Remove empty permissions block from canary

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: antony

.github/workflows/canary-libs.yml

@@ -5,20 +5,20 @@ on:
     branches:
       - 'feature/by-*'
 
-permissions: {}
-
 jobs:
   canary:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - name: checkout
+        uses: actions/checkout@v5
+
+      - name: set up node and pnpm
+        run: |
+          corepack enable
+          pnpm i
 
-      - run: corepack enable
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 24
-          cache: pnpm
+      - name: package
+        run: pnpm package
 
-      - run: pnpm install
-      - run: pnpm package
-      - run: pnpm exec pkg-pr-new publish
+      - name: publish canary
+        run: pnpm exec pkg-pr-new publish

.github/workflows/publish.yml

@@ -20,8 +20,8 @@ jobs:
           pnpm config set '//npm.pkg.github.com/:_authToken' "${{ secrets.GITHUB_TOKEN }}"
           pnpm i
 
-      - name: build
-        run: pnpm build
+      - name: package
+        run: pnpm package
 
       - name: publish
         run: |