helixir@0.6.1

Patch Changes

• 162b1cd: chore(deps): clear high-severity transitive vulnerabilities

  Adds pnpm overrides to patch 13 high-severity transitive advisories
  (tar, vite, picomatch, lodash, path-to-regexp, flatted, hono) to their
  fixed releases within the same major version. No breaking changes; build
  and full test suite pass. Brings pnpm audit --audit-level=high to zero.

• c172709: chore: migrate npm publishing to Trusted Publishing (OIDC)

  Removes long-lived NPM_TOKEN dependency from the publish workflow.
  Authentication now happens via GitHub Actions OIDC token federation
  (pnpm 9.15.9 has native OIDC trusted-publishing support), in response
  to the npm Mini Shai-Hulud token rotation event. Sigstore provenance
  attestation preserved. No consumer-facing changes.