[WTF-2433]: Make widgets-tools publishing actions "trusted publishers" with npm (#148)

The previous version included some string escaping that confused the
action runner.

To be able to re-run the publishing job I needed to "unrelease" the
latest version in the Changelog. If there are no unreleased changes the
create PWT release job will fail.

Author: weirdwater

.github/workflows/PublishNpm.yml

@@ -22,7 +22,9 @@ jobs:
           echo "releases=$(
             (
               for tag in $(git tag --points-at HEAD); do
-                echo "{ \"package\": \"${tag%-v*}\", \"version\": \"${tag##*-v}\" }"
+                package=${tag%-v*}
+                version=${tag##*-v}
+                jq -nc --arg p $package --arg v $version '{ package: $p, version: $v }'
               done
             ) | jq --slurp '.'
           )" >> "$GITHUB_OUTPUT"

packages/pluggable-widgets-tools/CHANGELOG.md

@@ -6,8 +6,6 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ## [Unreleased]
 
-## [11.3.0] - 2025-11-10
-
 ### Changed
 
 -   We added @d11/react-native-fast-image as an external native dependency in rollup config.