ci: provide npm publish from PR pipeline

[antongolub]

@pradel , This might be useful for proposals testing

[antongolub]

@pradel , What's your vision here?

[pradel]

@antongolub sounds good, I will review the prs once I have a bit of time, these days are quite busy (in about 1/2 weeks)

[antongolub]

Should be rebased after #77

[pradel]

@antongolub is this ready to be merged?

[antongolub]

@pradel I want to believe. The only way to verify the pipeline is to run.

[pradel]

@antongolub can we move the pipeline logic to the release-please.yml file? The repo is now publishing to npm using OIDC instead of an NPM_TOKEN for improved security and npm only allows 1 file per repo to access the OIDC credentials, so all the logic to publish needs to be in the same file unfortunately

[antongolub]

@pradel,

There are several options:

1. Create additional trusted publisher entry for release-from-pr.yml
2. Trigger subflows from root release.yml and pass down the token to release-please and release-from-pr.
3. Create a single complex godlike publish file

[pradel]

Create additional trusted publisher entry for release-from-pr.yml

Not an option on npm unfortunately, there can be only 1 file for this

Trigger subflows from root release.yml and pass down the token to release-please and release-from-pr.

I don't think this would work as they check on which action the token is used

Create a single complex godlike publish file

I don't like this approach but it looks like it's the only option..