feat: add publish-npm workflow

.github/workflows/publish-npm.yml

@@ -0,0 +1,71 @@
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+
+name: Publish NPM
+
+on:
+  workflow_dispatch:
+
+  release:
+    types:
+      - created
+
+env:
+  NODE_VERSION: lts/*
+
+jobs:
+  publish-npm:
+    if: github.repository_owner == 'the-nexim'
+
+    name: Publish NPM
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - name: 📥 Checkout repository
+        uses: actions/checkout@v4
+
+      - name: 🔧 Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ inputs.NODE_VERSION }}
+
+      - name: 🛠️ Setup Node.js Corepack
+        run: corepack enable
+
+      - name: 📦 Get Yarn Config
+        id: yarn_config
+        run: echo "cache_folder=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
+
+      - name: 🗄️ Cache Layer
+        uses: actions/cache@v4
+        with:
+          path: ${{ steps.yarn_config.outputs.cache_folder }}
+          key: ${{ runner.os }}-yarn-${{ hashFiles('yarn.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-yarn-
+
+      - name: 📥 Install Dependencies
+        run: yarn install --immutable
+
+      - name: 🗃️ Cache Wireit
+        uses: google/wireit@setup-github-actions-caching/v2
+
+      - name: 🏗️ Build TypeScript
+        run: yarn build
+        env:
+          WIREIT_LOGGER: metrics
+
+      - name: 🧹 Run ESLint
+        run: yarn lint
+        env:
+          WIREIT_LOGGER: metrics
+
+      - name: 🚀 Publish
+        run: yarn run publish -- --yes
+        env:
+          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
+          NPM_CONFIG_PROVENANCE: true
+          WIREIT_LOGGER: metrics