Updates required to the npm publishing github workflow

- dropping use of JS-Devtools/npm-publish action in favor of direct npm
  commands
- switching to the Trusted Publisher model
- splitting workflow into two jobs so that we can package using
  nodejs v14 (which seems to be the only version capable of producing
  a package compatible with the dce-dev-wizard), and then publish using
  nodejs v24 which is compatible with the trusted publisher model

Author: lbjay

.github/workflows/npm-publish.yml

@@ -5,7 +5,7 @@ on:
   push:
     branches: [main]
     paths-ignore:
-      - '*.md'
+      - "*.md"
 
 jobs:
   build:
@@ -14,9 +14,32 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-node@v1
         with:
-          node-version: '14.x'
-          registry-url: 'https://registry.npmjs.org'
+          node-version: "14.x"
       - run: npm ci
-      - uses: JS-DevTools/npm-publish@v1
+      - run: npm pack
+      - name: Upload package tarball
+        uses: actions/upload-artifact@v4
         with:
-          token: ${{ secrets.NPM_TOKEN }}
+          name: package
+          path: "*.tgz"
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+          registry-url: "https://registry.npmjs.org"
+
+      - name: Download package tarball
+        uses: actions/download-artifact@v4
+        with:
+          name: package
+
+      - run: npm publish *.tgz --access public --tag pubfix

npm-shrinkwrap.json

@@ -1,6 +1,10 @@
 {
   "name": "caccl-deploy",
-  "version": "0.19.0",
+  "version": "0.19.0-pubfix",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/harvard-edtech/caccl-deploy.git"
+  },
   "description": "A cli tool for managing ECS/Fargate app deployments",
   "main": "index.js",
   "bin": {