chore: setup npm trusted publish

[SukkaW]

No description provided.

[Copilot]

Pull request overview

This PR sets up automated npm publishing with provenance support (trusted publishing) for the package. It adds a GitHub Actions workflow to automatically publish the package to npm when release commits are pushed to the master branch, along with the necessary tooling to create versioned releases.

• Adds bumpp tool for version management and automated release commits
• Creates GitHub Actions workflow for automated npm publishing with provenance
• Updates build tool bunchee to latest version (6.7.0)

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 6 comments.

File	Description
package.json	Adds bumpp devDependency and prerelease/release scripts for version management; updates bunchee to 6.7.0; removes author field; bumps pnpm to 10.26.2
.github/workflows/publish.yml	New workflow for automated npm publishing with provenance on pushes to master branch; includes conditional publishing based on commit message patterns
pnpm-lock.yaml	Lock file updates reflecting the new dependencies (bumpp and related packages) and bunchee version update

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.