chore: update OpenAPI workflows and fix npm publishing

[nastassiafulconis]

Summary

Fixed the auto-update OpenAPI workflow to create PRs instead of pushing directly to main, and updated to fetch from the correct OpenAPI specs. Also fixed the release workflow to use npm Trusted Publishing with OIDC.

Changes

• Auto-update workflow:

  • Now creates PRs instead of pushing directly to main (fixes branch protection violations)
  • Updated to fetch from agentic-api repo instead of docs site
  • Switched from media-agent-openapi.yaml to outcome-agent-openapi.yaml
  • Added partner-api.yaml and platform-api.yaml specs

• Release workflow:

  • Configured for npm Trusted Publishing using OIDC
  • Added id-token: write permission for OIDC authentication
  • Removed NPM_TOKEN dependencies (now using Trusted Publishing)

• Package.json:

  • Updated OpenAPI generation scripts to match new spec files
  • Changed URLs to point to GitHub raw content from agentic-api repo

Testing

• ✅ Type-check passes
• ✅ Build passes
• ✅ Tests pass (2 test suites, 9 tests)

TODO

• Configure Trusted Publisher on npm for the release workflow (instructions provided)
  • Go to: https://www.npmjs.com/settings/scope3/packages/@scope3/agentic-client/trusted-publishers
  • Add GitHub Actions trusted publisher with:
    • Repository owner: scope3data
    • Repository name: agentic-client
    • Workflow file path: .github/workflows/release.yml

Notes

The auto-update workflow will now automatically create PRs when OpenAPI specs change, respecting branch protection rules.