Add minimal .npmrc to force OIDC authentication (OpenRouterTeam#227)

subtleGradient · web-flow · commit aa76b959467c · 2025-11-12T14:12:39.000-05:00
- Create .npmrc with only registry URL
- No auth token configured, forcing npm to use OIDC
- Test if npm will use OIDC token from GitHub Actions id-token permission
- If successful, this eliminates need for NPM_TOKEN secret
diff --git a/.npmrc b/.npmrc
@@ -0,0 +1 @@
+registry=https://registry.npmjs.org/
