npm publish docs & diagnostics (no functional change to publishing).
- Fix the OIDC debug step: it read
${{ env.ACTIONS_ID_TOKEN_REQUEST_URL }}, which theenvcontext can't see (always printedset: false); now reads the shell var, and printsjob_workflow_ref. - Document npm Trusted Publishing setup for reusable callers (configure your repo + your caller workflow filename), the documented reusable-workflow caveat, and recommend a self-contained publish workflow as the reliable fallback.
Reusable publish behavior is unchanged from v10. Consumers on @v10 can bump to @v11 for the corrected docs/diagnostic.