v0.4.8
Immutable
release. Only release title and notes can be modified.
fix(ci): move npm stage publish into environment-scoped job
The OIDC token for npm trusted publishing must carry the environment
claim. Running npm stage publish in a job without environment: npm-publish
produced E401 even with the trusted publisher configured. Moving it into
the npm-approve job (which declares the environment) fixes the claim.
Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com