chore: enhance publish workflow with dry-run option for safer publishing

Author: Zendrex

.github/workflows/publish.yml

@@ -4,6 +4,12 @@ on:
   release:
     types: [published]
   workflow_dispatch:
+    inputs:
+      dry-run:
+        description: 'Run without actually publishing'
+        required: false
+        type: boolean
+        default: false
 
 concurrency:
   group: publish-${{ github.ref }}
@@ -31,8 +37,14 @@ jobs:
       - name: Build
         run: bun run build
 
-      - name: Configure npm authentication
-        run: echo "//npm.pkg.github.com/:_authToken=${{ secrets.GITHUB_TOKEN }}" > ~/.npmrc
-
       - name: Publish
+        if: ${{ !inputs.dry-run }}
         run: bun publish --ignore-scripts --registry https://npm.pkg.github.com
+        env:
+          NPM_CONFIG_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Publish (dry-run)
+        if: ${{ inputs.dry-run }}
+        run: bun publish --ignore-scripts --dry-run --registry https://npm.pkg.github.com
+        env:
+          NPM_CONFIG_TOKEN: ${{ secrets.GITHUB_TOKEN }}