deploy-npm — Full release workflow

This skill is opinionated for repos that use:

• pnpm + turbo monorepo
• @changesets/cli + @changesets/action for versioning and changelog generation
• A GitHub Actions workflow named Release (.github/workflows/release.yml) that runs changeset version + changeset publish on push to master
• npm Trusted Publisher (OIDC) with provenance — no long-lived NPM_TOKEN
• step-security/harden-runner blocking some runner writes (notably git tag refs)

Adapt the package / branch / workflow names if the target repo differs, but keep the phase order — every phase blocks on the previous one.

Quick Start

Copy this checklist into the conversation and tick boxes as you go: