Use correct workflow for npm publishing (#1531)

* fix: ensure npm packages are set to public access after publish

The --access flag only applies on initial publish. For packages
previously published as restricted, run npm access public after
publish to correct the access level.

Tested by:
- Created a test scoped package (@elchiapp/test) and ran the
  publish-library-to-npm action locally using act (nektos/act)
  inside a Docker container (catthehacker/ubuntu:act-latest)
- Confirmed npm publish --access public sets access correctly
  on initial publish
- Verified the package appeared as public on npmjs.com
- Unpublished the test package after verification

Made-with: Cursor

* infra: use local publish-library-to-npm action instead of oss-actions

Switch all 13 workflows from tetherto/oss-actions@v1.1.0 to the
local ./.github/actions/publish-library-to-npm action so the
ACCESS="public" fix takes effect immediately without waiting for
an oss-actions release.

Made-with: Cursor

Author: elchiapp

.github/workflows/on-merge-lib-infer-diffusion.yml

@@ -215,7 +215,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/oss-actions/.github/actions/publish-library-to-npm@v1.1.0
+        uses: ./.github/actions/publish-library-to-npm
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"

.github/workflows/on-merge-ocr-onnx.yml

@@ -207,7 +207,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/oss-actions/.github/actions/publish-library-to-npm@v1.1.0
+        uses: ./.github/actions/publish-library-to-npm
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"

.github/workflows/on-merge-qvac-lib-decoder-audio.yml

@@ -182,7 +182,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/oss-actions/.github/actions/publish-library-to-npm@v1.1.0
+        uses: ./.github/actions/publish-library-to-npm
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"

.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml

@@ -183,7 +183,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/oss-actions/.github/actions/publish-library-to-npm@v1.1.0
+        uses: ./.github/actions/publish-library-to-npm
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"

.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml

@@ -216,7 +216,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/oss-actions/.github/actions/publish-library-to-npm@v1.1.0
+        uses: ./.github/actions/publish-library-to-npm
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"

.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml

@@ -206,7 +206,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/oss-actions/.github/actions/publish-library-to-npm@v1.1.0
+        uses: ./.github/actions/publish-library-to-npm
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"

.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml

@@ -181,7 +181,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/oss-actions/.github/actions/publish-library-to-npm@v1.1.0
+        uses: ./.github/actions/publish-library-to-npm
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"

.github/workflows/on-merge-qvac-lib-infer-onnx.yml

@@ -184,7 +184,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/oss-actions/.github/actions/publish-library-to-npm@v1.1.0
+        uses: ./.github/actions/publish-library-to-npm
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"

.github/workflows/on-merge-qvac-lib-infer-parakeet.yml

@@ -209,7 +209,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/oss-actions/.github/actions/publish-library-to-npm@v1.1.0
+        uses: ./.github/actions/publish-library-to-npm
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"

.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml

@@ -219,7 +219,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/oss-actions/.github/actions/publish-library-to-npm@v1.1.0
+        uses: ./.github/actions/publish-library-to-npm
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"