ci: attempt npm --dry-run

Ticket: DX-2084

Author: tanjeemh

.github/workflows/release.yaml

@@ -21,19 +21,26 @@ on:
       - "[0-9]+.x"
 
 jobs:
-  verify-oidc:
+  test-oidc-publish:
     runs-on: ubuntu-latest
     permissions:
       id-token: write
       contents: read
     steps:
-      - name: Show OIDC token
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          registry-url: https://registry.npmjs.org/
+      - name: Verify OIDC authentication with npm
         run: |
-          echo "OIDC token exists: $ACTIONS_ID_TOKEN_REQUEST_TOKEN"
+          echo "Running npm publish dry-run to test OIDC auth..."
+          npm publish --dry-run --provenance
 
   release:
-    uses: semantic-release-action/typescript/.github/workflows/release.yml@1d40c29e2d500f3bcceeb13f95d26a3a1b571f51 # v3.0.20
+    needs: [test-oidc-publish]
+    uses: semantic-release-action/typescript/.github/workflows/release.yml@1d40c29e2d500f3bcceeb13f95d26a3a1b571f51
     secrets:
-      npm-token: ${{ secrets.NPM_TOKEN }}
+      npm-token: "FAKE_NPM_TOKEN_FOR_SEMANTIC_RELEASE"
     with:
       disable-semantic-release-git: true