[Omni] Enable OIDC npm publishing for releases

[numbers-official]

Summary

Switch the production npm release workflow to use npm Trusted Publishing via GitHub OIDC instead of relying on the long-lived NPM_TOKEN secret. This aligns the release process for @numbersprotocol/capture-eye with npm’s recommended CI/CD authentication model and reduces token rotation overhead. The CI and release workflows now also include Node.js 24 to keep the GitHub Actions Node environment consistent with current runtime support.

Changes

• Updated .github/workflows/production-release.yml to grant OIDC permissions and publish to npm without NPM_TOKEN.
• Updated .github/workflows/build.yml to add Node.js 24.x to the CI matrix.
• Updated .github/workflows/dev-release.yml to run release steps on Node.js 24.
• Updated package.json with npm package publishing configuration for @numbersprotocol/capture-eye.
• Added implementation notes in .omni/af42200c-github-npm/memory.md.

5 files changed, +35 additions, -7 deletions

File changes

.github/workflows/build.yml              |  2 +-
 .github/workflows/dev-release.yml        |  2 +-
 .github/workflows/production-release.yml | 11 ++++++-----
 .omni/af42200c-github-npm/memory.md      | 23 +++++++++++++++++++++++
 package.json                             |  4 ++++

---

Generated by Olga Shen with Omni