Publishing to npm From GitHub ActionsAutomation tokens, the NPM_TOKEN secret, and a release-triggered workflow that publishes with provenance.