shuffle helpers around #32

	name: CI
	on:
	- push
	- pull_request
	jobs:
	quality-checks:
	name: Quality Checks
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	#with:
	# fetch-tags: true
	# fetch-depth: 1
	- uses: actions/setup-node@v4
	with:
	node-version: 20
	- uses: pnpm/action-setup@v4
	name: Install pnpm
	with:
	run_install: false
	version: 9
	- name: install
	run: pnpm install
	- name: format-check
	run: pnpm run format --check
	- name: lint
	run: pnpm run lint
	- name: build
	run: pnpm run build
	- name: test
	run: pnpm run test
	- name: smoke
	run: pnpm run smoke
	- name: publish
	if: startsWith(github.ref, 'refs/tags/v')
	env:
	NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
	run: \|
	git fetch --tags --force
	# we need to have a safe way to store of allowedSigners
	git config --local --add gpg.ssh.allowedSignersFile ./allowed_signers
	echo "GITHUB_REF->"$GITHUB_REF
	# test tag signature
	git tag -v $(git describe --tags --abbrev=0)
	# should only run if a tag is set
	echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
	pnpm run publish

Provide feedback