ci: publish via npm OIDC trusted publishing; fix repository URL to RandomCodeSpace/lane

- publish.yml: Node 24 + npm@latest (>=11.5.1 for OIDC), drop NODE_AUTH_TOKEN and
  --provenance (trusted publishing authenticates via OIDC and generates provenance
  automatically). id-token: write retained.
- package.json: repository/homepage/bugs URLs were stale (glab-tracker); point them
  at the renamed repo (lane). repository.url must match the GitHub repo for OIDC.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: aksOps

.github/workflows/publish.yml

@@ -10,15 +10,18 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      id-token: write
+      id-token: write # required for OIDC trusted publishing
     steps:
       - uses: actions/checkout@v4
 
       - uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "24" # Node >= 22.14 required for trusted publishing
           registry-url: "https://registry.npmjs.org"
 
+      - name: Ensure npm >= 11.5.1 (OIDC trusted publishing)
+        run: npm install -g npm@latest
+
       - name: Install
         run: npm ci
 
@@ -31,7 +34,6 @@ jobs:
       - name: Build
         run: npm run build
 
+      # Trusted publishing via OIDC — no NPM token, provenance is automatic.
       - name: Publish
-        run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --access public

package.json

@@ -5,11 +5,11 @@
   "type": "module",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/RandomCodeSpace/glab-tracker.git"
+    "url": "git+https://github.com/RandomCodeSpace/lane.git"
   },
-  "homepage": "https://github.com/RandomCodeSpace/glab-tracker#readme",
+  "homepage": "https://github.com/RandomCodeSpace/lane#readme",
   "bugs": {
-    "url": "https://github.com/RandomCodeSpace/glab-tracker/issues"
+    "url": "https://github.com/RandomCodeSpace/lane/issues"
   },
   "publishConfig": {
     "access": "public"