0.2.3

Third attempt at the npm publish, and this one fixes the cause rather than the symptom.

actions/setup-node@v4 exports a placeholder NODE_AUTH_TOKEN; npm 11 preferred that placeholder over the OIDC trusted-publishing exchange, and the registry answered 404 Not Found - PUT. The workflow now uses actions/setup-node@v7 (which no longer exports the placeholder) and removes the generated .npmrc before publishing, so npm has no token at all and falls through to OIDC.

npm never received 0.2.1 or 0.2.2, so this release carries their changes:

• The Action is named Zhiliang agentgate for the GitHub Marketplace.
• The scan-execution coverage record and the inventory coverage report.

Published to npm as next; latest stays 0.2.0 until it is promoted.

Full notes: CHANGELOG.md