astack 0.11.1

• First release through npm trusted publishing: publish.yml publishes with GitHub's OIDC identity and no npm token.
• CONTRIBUTING.md replaces the npm trust command, which npm refuses from a CLI login, with the npmjs.com settings steps that work.