fix(release): harden semantic-release publishing

.github/workflows/publish.yml

@@ -39,8 +39,10 @@ jobs:
         with:
           # npm trusted publishing requires Node 22.14.0+.
           node-version: "24"
+          registry-url: "https://registry.npmjs.org"
 
       - name: Release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: npx semantic-release

.releaserc.json

@@ -2,5 +2,19 @@
   "branches": [
     "main"
   ],
-  "tagFormat": "v${version}"
+  "tagFormat": "v${version}",
+  "plugins": [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    "@semantic-release/npm",
+    [
+      "@semantic-release/github",
+      {
+        "successComment": false,
+        "failComment": false,
+        "labels": false,
+        "releasedLabels": false
+      }
+    ]
+  ]
 }