Add npm publish action

[jbudz]

Release workflow

1. npm version <version>
2. git push <remote> <branch>
3. git push <remote> <tag>
4. Releases -> Draft a new release -> Publish release
5. publish.yml runs and pushes the package to npm

[Copilot]

Pull Request Overview

This PR adds an automated npm publishing workflow that triggers when a GitHub release is published. The workflow verifies the release tag matches the package.json version before publishing to npm with provenance.

• Adds automated npm package publishing via GitHub Actions
• Includes tag/version verification to prevent mismatched releases
• Uses provenance for enhanced package security

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

The npm publish step is missing the NODE_AUTH_TOKEN environment variable which is required for authentication to npmjs. Add env: NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }} to this step.

Suggested change

	- run: npm publish --provenance
	- run: npm publish --provenance
	env:
	NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}

[jbudz]

Not expecting this to be needed.

https://docs.npmjs.com/trusted-publishers#automatic-provenance-generation