[Hermes] Restore npm-publish.yml — repo has legitimate npm wrapper

[Coding-Dev-Tools]

Summary

Restores the npm-publish.yml workflow that was incorrectly removed in PR #8.

Why this change

PR #8 removed npm-publish.yml under the assumption that Python repos should not have npm-publish workflows. However, this repo has a legitimate npm wrapper (package.json + cli.js) that allows users to install via npm install -g configdrift. The npm-publish workflow is needed to publish this wrapper to the npm registry.

The npm wrapper pattern (package.json + cli.js → spawns Python CLI) is an intentional distribution strategy across the DevForge portfolio. Removing the publish workflow breaks the ability to release npm packages.

What changed

• Restored .github/workflows/npm-publish.yml to its pre-PR-8 state

Validation performed

• Verified package.json and cli.js exist in the repo
• Verified cli.js is a functional Node.js wrapper that spawns the Python CLI
• File content matches the original (commit 743aa39)

Risks/rollback

• Zero risk — restoring a file that existed 1 commit ago
• If someone intentionally wanted to remove npm distribution, they would also need to remove package.json and cli.js

Follow-ups

• datamorph also needs npm-publish.yml restored (same incorrect removal in PR [Hermes] CI hardening: remove npm-publish, add Python 3.13, harden checkout & permissions #13)
• Update backlog: npm-publish.yml removal is NOT applicable to repos with npm wrappers
• Update agent-patterns.md: always check for package.json + cli.js before assuming npm-publish.yml is wrong-language