build: update publish workflow

Author: LastLeaf

.github/workflows/publish.yml

@@ -18,6 +18,16 @@ jobs:
         with:
           node-version: '24'
       - run: npm ci
+      - name: Verify tag matches package.json version
+        if: startsWith(github.ref, 'refs/tags/')
+        run: |
+          TAG_VERSION="${GITHUB_REF#refs/tags/v}"
+          PKG_VERSION=$(node -p "require('./package.json').version")
+          if [ "$TAG_VERSION" != "$PKG_VERSION" ]; then
+            echo "::error::Tag version ($TAG_VERSION) does not match package.json version ($PKG_VERSION)"
+            exit 1
+          fi
+          echo "Version check passed: $PKG_VERSION"
       - run: npm run build
       - run: npm test
       - run: npm publish --provenance