fix(ci): publish to npm in its own job; remove duplicate Pages workflow

.github/workflows/release-please.yml

@@ -22,23 +22,28 @@ jobs:
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
-      # --- Publish to npm only when this run created a release ---
-      # Done here (not in a separate release-triggered workflow) because events
-      # created by GITHUB_TOKEN do not trigger other workflows.
+  # --- Publish to npmjs.org ---
+  # Its own job so an npm auth problem (expired NPM_TOKEN) cannot skip the
+  # GitHub Packages publish below. Done here (not in a separate
+  # release-triggered workflow) because events created by GITHUB_TOKEN do
+  # not trigger other workflows.
+  publish-npm:
+    needs: release-please
+    if: ${{ needs.release-please.outputs.release_created == 'true' }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write   # npm provenance
+    steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        if: ${{ steps.release.outputs.release_created }}
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
-        if: ${{ steps.release.outputs.release_created }}
         with:
           node-version: '24'
           registry-url: https://registry.npmjs.org
           cache: npm
-      - if: ${{ steps.release.outputs.release_created }}
-        run: npm ci
-      - if: ${{ steps.release.outputs.release_created }}
-        run: npm run build
+      - run: npm ci
+      - run: npm run build
       - name: Publish to npm (skip if version already exists)
-        if: ${{ steps.release.outputs.release_created }}
         run: |
           VER=$(node -p "require('./package.json').version")
           if npm view "lombokcss@$VER" version >/dev/null 2>&1; then