retellai-ci-integration

No direct malware is evident in the supplied workflows and test fragment. The main security concern is excessive production API-key exposure to npm installation, tests, build, and publish steps, including potentially compromised dependencies or scripts. Restrict the secret to the single integration-test step, use environment-scoped protections, pin actions to immutable SHAs, and strengthen the release process with provenance and controlled publishing.