fix: publish to npm

.github/workflows/main.yml

@@ -14,13 +14,14 @@ jobs:
     uses: ocadotechnology/codeforlife-workspace/.github/workflows/test-javascript-code.yaml@main
     secrets: inherit
     with:
-      # Cannot be set with an env var. Value must match in the release job.
       node-version: 18
 
   release:
     needs: [test]
     concurrency: release
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write # to enable use of OIDC for npm provenance
     # Release if:
     #  - the repo's owner is Ocado Tech.
     #  - a change is made to the default branch.
@@ -32,3 +33,4 @@ jobs:
         uses: ocadotechnology/codeforlife-workspace/.github/actions/github/release@main
         with:
           cfl-bot-gh-token: ${{ secrets.CFL_BOT_GH_TOKEN }}
+          npm-token: ${{ secrets.NPM_TOKEN }}

package.json

@@ -9,7 +9,7 @@
   ],
   "name": "codeforlife",
   "description": "Common frontend code",
-  "private": true,
+  "private": false,
   "version": "2.6.0",
   "type": "module",
   "scripts": {