chore: enhance npm publish workflow with structured steps and version check

Author: jinzcdev

.github/workflows/npm-publish.yml

@@ -16,9 +16,22 @@ jobs:
         with:
           node-version: 20
           registry-url: https://registry.npmjs.org/
-      - run: npm ci
-      - run: npm test
-      - run: npm run build
-      - run: npm publish
+          cache: "npm"
+      - name: Install dependencies
+        run: npm ci
+      - name: Run tests
+        run: npm test
+      - name: Build package
+        run: npm run build
+      - name: Check package version matches release
+        run: |
+          PKG_VERSION=$(node -p "require('./package.json').version")
+          GITHUB_REF_VERSION=${GITHUB_REF#refs/tags/v}
+          if [ "$PKG_VERSION" != "$GITHUB_REF_VERSION" ]; then
+            echo "::error::Package version ($PKG_VERSION) does not match release tag ($GITHUB_REF_VERSION)"
+            exit 1
+          fi
+      - name: Publish to NPM
+        run: npm publish --provenance --access public
         env:
           NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}