chore(release): switch to npm trusted publishing

[dotansimha]

• stable
• rc
• alpha/snapshot
• unify into a single file
• configure npm trusted publishing
• test in ci

[gemini-code-assist]

Code Review

This pull request removes the pnpm build step from the release script in package.json. The reviewer raised a valid concern that this could lead to publishing stale or unbuilt artifacts when run locally or in other environments, and suggested keeping the build step in the script while configuring the CI workflow to invoke the publish command directly.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[github-actions]

🚀 Snapshot Release (alpha)

The latest changes of this PR are available as alpha on npm (based on the declared changesets):

Package	Version	Info
@theguild/federation-composition	0.23.1-alpha-20260716152057-ffbdb6d404fed874b65c8e550f57e5909c7d1321	npm ↗︎ unpkg ↗︎

[jdolle]

thank you!