Github-Actions

Automation tokens, the NPM_TOKEN secret, and a release-triggered workflow that publishes with provenance.

Creating the service account and JSON key in Google Cloud, granting it release access in Play Console, and using it from a GitHub Actions workflow.