PartyLayer/PartyLayer: docs/trusted-publishing.md

Owner-approved npm releases The selected release model uses one protected GitHub approval per release run. npm-publish.yml builds and records exact package files, then waits for the owner in the npm-release environment. After approval, an isolated job publishes those files through npm OIDC. There…