- Add id-token: write permission for OIDC authentication - Add --provenance flag to npm publish for supply chain security - Use NODE_AUTH_TOKEN environment variable (set by setup-node) - Remove manual .npmrc token writing (handled by setup-node with OIDC) This enables automated npm publishing without storing tokens as secrets. Requires Trusted Publisher to be configured at: https://www.npmjs.com/package/@valknarthing/llmx/access 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>