feat: add semantic-release for automated npm publishing

CI now runs tests then auto-publishes to npm on push to main
via semantic-release with OIDC provenance. Version reverted
to 0.0.0-development — semantic-release manages versioning
from commit messages.

Author: TheCryptoDonkey

.github/workflows/ci.yml

@@ -5,6 +5,9 @@ on:
     branches: [main]
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest

.releaserc

@@ -0,0 +1,27 @@
+{
+  "branches": ["main"],
+  "plugins": [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    "@semantic-release/changelog",
+    [
+      "@semantic-release/npm",
+      {
+        "pkgRoot": "."
+      }
+    ],
+    [
+      "@semantic-release/git",
+      {
+        "assets": ["package.json", "package-lock.json", "CHANGELOG.md"],
+        "message": "chore(release): ${nextRelease.version}\n\n${nextRelease.notes}"
+      }
+    ],
+    [
+      "@semantic-release/github",
+      {
+        "successComment": "🎉 This release is published on npm: https://www.npmjs.com/package/nsec-tree-cli/v/${nextRelease.version}"
+      }
+    ]
+  ]
+}

package.json

@@ -1,6 +1,6 @@
 {
   "name": "nsec-tree-cli",
-  "version": "1.0.0",
+  "version": "0.0.0-development",
   "description": "Offline-first CLI for hierarchical Nostr identities",
   "type": "module",
   "engines": {