Merge branch 'main' into james/memoize_survey_factory

Author: JamesPHoughton

.github/workflows/publish.yml

@@ -3,26 +3,33 @@ on:
   push:
     branches:
       - main
+
 jobs:
   build:
     runs-on: ubuntu-latest
     permissions:
       contents: read
       id-token: write # required for npm trusted publisher (OIDC)
 
+
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
           node-version: "18.x"
           registry-url: "https://registry.npmjs.org"
+
       - name: Use latest npm (trusted publisher support)
         run: npm install -g npm@latest
+        
       - name: Clean legacy npm auth config
         run: npm config delete //registry.npmjs.org/:_authToken || true
+        
       - run: npm ci
       - run: npm run build
+      
       - name: Verify identity (OIDC)
         run: npm whoami
+
       # OIDC auth + provenance; no token needed when using trusted publishers
       - run: npm publish --provenance --access public