Add minimal .npmrc to force OIDC authentication (#227)

subtleGradient · web-flow · commit b151cf46c92a · 2025-11-12T14:12:39.000-05:00
- Create .npmrc with only registry URL
- No auth token configured, forcing npm to use OIDC
- Test if npm will use OIDC token from GitHub Actions id-token permission
- If successful, this eliminates need for NPM_TOKEN secret
diff --git a/.npmrc b/.npmrc
@@ -0,0 +1 @@
+registry=https://registry.npmjs.org/
