refactor: replace inline Shamir implementation with @forgesworn/shami… #72

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	permissions:
	contents: read

	jobs:
	test:
	runs-on: ubuntu-24.04

	strategy:
	matrix:
	node-version: [20, 22]

	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Use Node.js ${{ matrix.node-version }}
	uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
	with:
	node-version: ${{ matrix.node-version }}
	cache: npm

	- name: Install dependencies
	run: npm ci

	- name: Type check
	run: npx tsc --noEmit

	- name: Run tests
	run: npx vitest run

	- name: Build
	run: npx tsc

	release:
	needs: test
	if: github.ref == 'refs/heads/main'
	runs-on: ubuntu-24.04
	permissions:
	contents: write
	issues: write
	pull-requests: write
	id-token: write # required for npm provenance attestation
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	fetch-depth: 0
	- uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
	with:
	node-version: 22
	cache: npm
	registry-url: 'https://registry.npmjs.org'
	- run: npm ci
	- run: npm run build
	- run: npx semantic-release
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
	NPM_CONFIG_PROVENANCE: true

Provide feedback