fix: use changeset tag instead of publish, defer npm publishing to cargo-dist

.github/workflows/release-changesets.yml

@@ -28,7 +28,6 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-      id-token: write
     steps:
       - uses: actions/checkout@v4
 
@@ -43,13 +42,12 @@ jobs:
       - name: Install Dependencies
         run: pnpm install
 
-      - name: Create Release Pull Request or Publish
+      - name: Create Release Pull Request or Tag
         id: changesets
         uses: changesets/action@v1
         with:
-          publish: pnpm changeset publish
+          publish: pnpm changeset tag
           commit: 'chore: release versions'
           title: 'chore: release versions'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

package.json

@@ -1,6 +1,7 @@
 {
   "name": "@googleworkspace/cli",
   "version": "0.1.0",
+  "private": true,
   "description": "Google Workspace CLI — dynamic command surface from Discovery Service",
   "license": "Apache-2.0",
   "repository": {