Update publish target and add release workflow

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: silverwind

.github/workflows/release.yaml

@@ -0,0 +1,27 @@
+name: release
+
+on:
+  push:
+    tags: ["*"]
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@v6
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v6
+        with:
+          cache: pnpm
+          node-version: latest
+          registry-url: "https://registry.npmjs.org"
+      - run: make deps
+      - run: make build
+      - run: make publish

Makefile

@@ -34,7 +34,6 @@ $(DIST_FILES): $(SOURCE_FILES) pnpm-lock.yaml vite.config.ts
 
 .PHONY: publish
 publish: node_modules
-	git push -u --tags origin master
 	pnpm publish --no-git-checks
 
 .PHONY: update