chore: switch to npm trusted publishing (OIDC)

Author: harshav167

.github/workflows/publish.yml

@@ -29,13 +29,13 @@ jobs:
       - name: Build
         run: bun run build
 
-      - name: Setup Node.js for npm publish
+      - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org'
 
+      # Trusted Publishing via OIDC - no token needed!
+      # See: https://docs.npmjs.com/trusted-publishers/
       - name: Publish to npm
-        run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --access public --provenance

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mailshieldai/opencode-canvas",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Interactive terminal canvases for OpenCode - calendars, documents, flight booking",
   "author": {
     "name": "Harsha",