Fix failing release publish action

[ryan2445]

actions/setup-node v7 breaking change:

The dummy NODE_AUTH_TOKEN fallback has been removed, as it could unintentionally affect the generated .npmrc with a non-functional token. With this change, if registry-url is set without NODE_AUTH_TOKEN, legacy Yarn Classic (1.x) and older Node/npm versions may fail, and pnpm may warn. npm Trusted Publishing (OIDC) is not affected, since it does not use NODE_AUTH_TOKEN.

Fixed by adding 2nd setup-node step with registry/scope fields right before publishing (where we set NODE_AUTH_TOKEN)

Summary by CodeRabbit

• Chores
  • Improved package publishing setup to apply registry authentication at the appropriate stage.
  • Updated build and test automation configuration without changing its behavior.
  • Updated the package version to 4.0.8-beta.0.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: QUIET

Plan: Pro

Run ID: 59e5f6d2-16ca-445a-8dfc-a19c9ca6a419

📥 Commits

Reviewing files that changed from the base of the PR and between 97740fb and 9f0cb61.

📒 Files selected for processing (1)

• package.json

---

📝 Walkthrough

Walkthrough

The publish workflow separates registry authentication from the initial Node setup. The build and test workflow changes setup-node quoting without changing behavior. The package version changes to 4.0.8-beta.0.

Changes

Workflow and package release updates

Layer / File(s)	Summary
Configure registry authentication before publishing .github/workflows/publish.yml, package.json	The initial Node setup no longer sets registry details. A second setup step configures the npm registry and package scope before publishing. The package version changes to 4.0.8-beta.0.
Normalize build and test setup values .github/workflows/build-test.yml	The lint and build-test jobs use double-quoted setup-node values. Workflow behavior remains unchanged.

Estimated code review effort: 2 (Simple) | ~10 minutes

Suggested reviewers: bzurkow

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the main change: fixing the release publish action.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ryanh/fix-publish-1

---

_{Comment @coderabbitai help to get the list of available commands.}