ci: add GitHub Packages publish job

[guyinwonder168]

Summary

• Add publish-github-packages job that runs after publish-npm succeeds
• Scopes package name to @guyinwonder168/opencode-codex-quota for GitHub Packages
• Uses GITHUB_TOKEN (automatic) — no extra secrets needed

Workflow

GitHub Release
  → publish-npm (npmjs.org with provenance)
  → publish-github-packages (npm.pkg.github.com, after npm succeeds)

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (1 file)

• .github/workflows/publish.yml - Added new publish-github-packages job

Overview

The PR adds a GitHub Packages publishing job that runs after the npm publish succeeds. The implementation:

• Uses GITHUB_TOKEN (automatically available) for authentication
• Properly scopes the package name to @guyinwonder168/opencode-codex-quota
• Sets appropriate permissions (contents: read, packages: write)
• Follows the same quality gates (build, typecheck, lint, test) as the npm job

No security, runtime, or logic issues detected.

---

_{Reviewed by minimax-m2.5-20260211 · 97,852 tokens}