ci(release): publish GitHub Packages via built-in GITHUB_TOKEN, make it non-blocking, and make npm publish idempotent

Author: MeridianAlgo-Developer

.github/workflows/release.yml

@@ -42,7 +42,9 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Publish to npm
-        run: npm publish --access public
+        # Idempotent: don't fail the release if this version is already published
+        # (e.g. when re-running a partially-successful release).
+        run: npm publish --access public || npm view "meridianalgo@${GITHUB_REF_NAME#v}" version
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
@@ -57,6 +59,11 @@ jobs:
           node -e "const pkg = require('./package.json'); pkg.name = '@meridianalgo/meridianalgo'; pkg.publishConfig = { registry: 'https://npm.pkg.github.com' }; require('fs').writeFileSync('package.json', JSON.stringify(pkg, null, 2));"
 
       - name: Publish to GitHub Packages
+        # Use the built-in GITHUB_TOKEN (the job already grants packages: write)
+        # so the mirror doesn't depend on a hand-maintained PAT. Non-blocking:
+        # a GitHub Packages hiccup must never fail a release whose npm publish
+        # already succeeded.
+        continue-on-error: true
         run: npm publish --access public
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_GITHUB_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}