ci: fix npm trusted publishing workflow

[netweng]

Summary

• replace Lerna 4 publish with npm CLI publishes so GitHub Actions trusted publishing can use npm OIDC
• add package-version checks so reruns continue publishing when the git tag already exists but npm packages are missing
• move Tag Check output from deprecated set-output to GITHUB_OUTPUT

Root cause

The failed job created v4100.0.5 successfully, then lerna publish from-package failed while publishing to npm with PUT 404. This repo uses Lerna 4, but Lerna trusted publishing support starts in Lerna 9; with token publishing removed, the old Lerna publish path does not authenticate through npm OIDC. Retry then failed with EUNCOMMIT because the first publish attempt left package manifests/README changed in the workspace.

Verification

• ruby -e 'require "yaml"; YAML.load_file(".github/workflows/publish.yml")'
• npx prettier --check .github/workflows/publish.yml
• local package check script reports has_unpublished_packages=true for v4100.0.5
• confirmed npm has no 4100.0.5 package versions while origin already has tag v4100.0.5

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
cloudtower-ui-kit	Ready	Preview, Comment	Apr 30, 2026 5:31am