ci: require manual approval before npm publish

Author: nucliweb

.github/workflows/publish-cli.yml

@@ -8,6 +8,7 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    environment: npm-publish
     permissions:
       contents: read