v1.2.0 — OIDC Trusted Publishing & CI improvements

What's changed

CI/CD

• Switched npm publish to OIDC Trusted Publishing (no static token required)
• Fixed FTP pre-cleanup using lftp with SSL cert bypass for shared hosting
• Fixed stale .deploy-sync-state causing "bad object" errors on CI
• Added workflow_dispatch for manual publish re-runs