chore(openwrk): add npm publish skill and bump

.opencode/skills/openwrk-npm-publish/.env.example

@@ -0,0 +1 @@
+NPM_TOKEN=

.opencode/skills/openwrk-npm-publish/.gitignore

@@ -0,0 +1 @@
+.env

.opencode/skills/openwrk-npm-publish/SKILL.md

@@ -0,0 +1,54 @@
+---
+name: openwrk-npm-publish
+description: |
+  Publish the openwrk npm package with clean git hygiene.
+
+  Triggers when user mentions:
+  - "openwrk npm publish"
+  - "publish openwrk"
+  - "bump openwrk"
+---
+
+## Quick usage (already configured)
+
+1. Ensure you are on the default branch and the tree is clean.
+2. Bump the version in `packages/headless/package.json`.
+3. Commit the bump.
+4. Publish the package.
+
+```bash
+pnpm --filter openwrk publish --access public
+```
+
+5. Verify the published version.
+
+```bash
+npm view openwrk version
+```
+
+---
+
+## Scripted publish
+
+```bash
+./.opencode/skills/openwrk-npm-publish/scripts/publish-openwrk.sh
+```
+
+---
+
+## First-time setup (if not configured)
+
+Authenticate with npm before publishing.
+
+```bash
+npm login
+```
+
+Alternatively, export an npm token in your environment (see `.env.example`).
+
+---
+
+## Notes
+
+- `pnpm publish` requires a clean git tree.
+- This publish flow is separate from app release tags.

.opencode/skills/openwrk-npm-publish/scripts/publish-openwrk.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(git rev-parse --show-toplevel)"
+cd "$root"
+
+if [ -n "$(git status --porcelain)" ]; then
+  echo "Working tree is dirty. Commit or stash before publish."
+  exit 1
+fi
+
+version=$(node -p "require('./packages/headless/package.json').version")
+echo "Publishing openwrk@$version"
+
+pnpm --filter openwrk publish --access public