ci: publish git-proxy-cli to npm

[jescalada]

Description

Adds workflow jobs to automatically publish @finos/git-proxy-cli to NPM. Ideally, we should merge #1520 and #1627 before this one to make sure future releases (2.1.0, etc.) work correctly for both the parent package and CLI.

Requirements

• Register @finos/git-proxy-cli on npmjs.org as a trusted publisher pointing to our workflow file (`.github/workflows/npm.yml).
• Manually publish 2.0.0 so people can use that version if desired
• Make sure ci: refactor workflows for release branching #1520 and ci: add package.json bumper workflow #1627 don't collide with CLI package publishing

Related Issue

Resolves #1653

Checklist

General

• I have read the CONTRIBUTING.md guidelines
• Commit messages follow Conventional Commits format
• I have a FINOS CLA on file

Documentation

• Documentation has been added/updated for any new features

Configuration

Tests

• Tests have been added/updated for new functionality
• Unit tests pass (npm test)
• Linting and formatting pass (npm run lint and npm run format:check)
• Type checks pass (npm run check-types)

[netlify]

✅ Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name	Link
🔨 Latest commit	27b8fce
🔍 Latest deploy log	https://app.netlify.com/projects/endearing-brigadeiros-63f9d0/deploys/6a603c022791d800087c93b7

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 2 package(s) with unknown licenses.

See the Details below.

License Issues

packages/git-proxy-cli/package.json

Package	Version	License	Issue Type
axios	^1.18.1	Null	Unknown License
yargs	^18.0.0	Null	Unknown License

Allowed Licenses:

MIT, MIT-0, Apache-2.0, BSD-3-Clause, BSD-3-Clause-Clear, ISC, BSD-2-Clause, Unlicense, CC0-1.0, 0BSD, X11, MPL-2.0, MPL-1.0, MPL-1.1, MPL-2.0, OFL-1.1, Zlib, BlueOak-1.0.0, LicenseRef-scancode-dco-1.1, Ubuntu-font-1.0, Artistic-2.0, Python-2.0, EPL-2.0

Excluded from license check:

pkg:npm/caniuse-lite, pkg:npm/path-is-inside, pkg:npm/unicode-match-property-value-ecmascript, pkg:npm/unicode-property-aliases-ecmascript, pkg:npm/uri-js

OpenSSF Scorecard

Package	Version	Score	Details
npm/axios	^1.18.1	Unknown	Unknown
npm/yargs	^18.0.0	Unknown	Unknown

Scanned Files

• packages/git-proxy-cli/package.json

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.97%. Comparing base (9bc9c0d) to head (27b8fce).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1654   +/-   ##
=======================================
  Coverage   85.97%   85.97%           
=======================================
  Files          87       87           
  Lines        8621     8621           
  Branches     1492     1492           
=======================================
  Hits         7412     7412           
  Misses       1178     1178           
  Partials       31       31           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.