Prepare npm trusted publishing release

[rezailmi]

Summary

• configure the release workflow to use npm trusted publishing/OIDC instead of the expired NPM_TOKEN path
• fix npm package metadata and publishing includes for the 0.2.21 release
• add portability checks for npm pack and npm publish dry-run behavior

Verification

• npm Trusted Publisher is configured for rezailmi/made-refine using publish.yml with npm publish permission
• bunx tsc --noEmit
• bun run build
• bun run test
• npm pack --dry-run --json
• npm publish --dry-run --tag latest
• bun pm pack --dry-run
• git diff --check
• npm view made-refine version -> 0.2.20