Add GitHub Actions CI and npm publish workflows

CI runs lint, format check, type check, and tests on PRs and pushes to
main. Publish workflow builds and publishes to npm via OIDC trusted
publishing on v* tag pushes. Added publishConfig to package.json for
provenance and public access defaults.

Author: ThomAub

.github/workflows/ci.yml

@@ -0,0 +1,24 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+permissions: {}
+
+jobs:
+  quality:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+      - run: npm ci
+      - run: npx playwright install chromium --with-deps
+      - run: npm run lint
+      - run: npm run fmt:check
+      - run: npm run check
+      - run: npm test

.github/workflows/publish.yml

@@ -0,0 +1,27 @@
+name: Publish
+
+on:
+  push:
+    tags: ["v*"]
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          registry-url: "https://registry.npmjs.org"
+      - run: npm ci
+      - run: npx playwright install chromium --with-deps
+      - run: npm run lint
+      - run: npm run fmt:check
+      - run: npm run check
+      - run: npm test
+      - run: npm run build
+      - run: npm publish --provenance --access public

package.json

@@ -72,5 +72,9 @@
   "peerDependencies": {
     "@sveltejs/kit": "^2.0.0",
     "svelte": "^5.0.0"
+  },
+  "publishConfig": {
+    "provenance": true,
+    "access": "public"
   }
 }