ci(publish): more oidc config & debugging

Author: andrewconnell

.github/workflows/plugin-publish.yml

@@ -103,21 +103,24 @@ jobs:
 
       - name: Configure npm for OIDC authentication
         run: |
-          # Configure npm to use provenance/OIDC for the registry
-          npm config set provenance true
-          # delete authtoken
-          npm config delete //registry.npmjs.org/:_authToken
-          # set always-auth
-          npm config set //registry.npmjs.org/:always-auth false
-          # delete auth
-          npm config delete always-auth
-          # npm list config
+          npm config delete //registry.npmjs.org/:_authToken 2>/dev/null || true
+          npm config delete always-auth 2>/dev/null || true
+          npm config delete //registry.npmjs.org/:always-auth 2>/dev/null || true
           npm config list -l
 
+      - name: Debug npm configuration
+        run: |
+          echo "=== NPM Config ==="
+          npm config list
+          echo "=== NPM Config (all) ==="
+          npm config list -l | grep -E "(registry|auth|provenance)"
+          echo "=== Environment ==="
+          env | grep -E "(NPM|NODE)" || true
+
       - name: Publish specific package to NPM with provenance
         run: |
           cd heft-plugins/${{ steps.version.outputs.package_short_name }}
-          npm publish --access public --tag ${{ steps.version.outputs.dist_tag }}
+          npm publish --access public --tag ${{ steps.version.outputs.dist_tag }} --provenance
 
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v1