Publish @korap/cmc-tagger to npm on version tags

Rename package to scoped @korap/cmc-tagger with public publishConfig,
restrict the published tarball to src/ + docs via a files whitelist, and
add a GitHub Actions job that publishes to npm on v* tags using OIDC
trusted publishing (no token, automatic provenance).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Change-Id: Id2b80fd739ae3190f7ef6eb007ddc2c2bc472a3e
diff --git a/package.json b/package.json
index 95f8957..0eadcb0 100644
--- a/package.json
+++ b/package.json
@@ -1,8 +1,16 @@
 {
-  "name": "conllu-cmc",
+  "name": "@korap/cmc-tagger",
   "version": "1.1.0",
+  "publishConfig": {
+    "access": "public"
+  },
   "description": "Reads CoNLL-U format from stdin and annotates emojis, emoticons, hashtags, URLs, email addresses, @addresses, and action words. Writes CoNLL-U format to stdout.",
   "main": "src/index.js",
+  "files": [
+    "src/",
+    "Readme.md",
+    "CHANGELOG.md"
+  ],
   "bin": {
     "conllu-cmc": "src/index.js",
     "cmc-tagger": "src/index.js"