chore: upgrade deps + npm trusted publishing

[karsten-bot]

Summary

• Upgraded devDependencies to latest stable major versions (TypeScript, Jest, microbundle, semantic-release and plugins).
• Added missing semantic-release plugins to devDependencies (commit-analyzer, release-notes-generator, npm, github).
• Added a tsconfig.json (non-strict) so ts-jest works with TS 5.
• Updated GitHub Actions workflows to Node 20 + actions/checkout@v4 + actions/setup-node@v4 + corepack + yarn cache.
• Migrated release workflow from NPM_TOKEN to npm Trusted Publishing (OIDC): removed NPM_TOKEN, added permissions incl id-token: write, and checkout fetch-depth: 0.

npm Trusted Publisher configuration (manual in npm UI)

Package: satzbau

Settings page: https://www.npmjs.com/package/satzbau/access

Add a Trusted Publisher with:

• Provider: GitHub Actions (OIDC)
• Repository: TimoBechtel/satzbau
• Workflow file: .github/workflows/release.yml
• Ref/Branch: main

Notes:

• The workflow now requests id-token: write and no longer uses NPM_TOKEN.
• Ensure the GitHub repo has Actions enabled and the workflow can run on pushes to main.

[TimoBechtel]

@karsten-bot tests are failing. probably needs node v22 instead of 20 in workflow. please fix

[karsten-bot]

Fixed — pushed Node v22 update to the PR branch.

Tests should pass now.

[github-actions]

🎉 This PR is included in version 2.1.1 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀