chore: publish security and esm support

[alikirec]

No description provided.

[Copilot]

Pull request overview

Updates the repo’s release tooling and packages to support npm publishing via OIDC and to begin publishing ESM alongside CJS (notably for @formsort/constants), while also bumping several toolchain dependencies.

Changes:

• Update release workflow to use Craft with npm OIDC (add id-token permission; remove NPM_TOKEN env).
• Update workspace/tooling dependencies (notably @sentry/craft and TypeScript) and adjust CI setup-node/caching behavior.
• Add dual-output (CJS + ESM) build and conditional exports for @formsort/constants.

Reviewed changes

Copilot reviewed 16 out of 17 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
yarn.lock	Updates lockfile for @sentry/craft and newly introduced transitive deps.
package.json	Bumps @sentry/craft; updates Volta Node version.
.vscode/settings.json	Adds an additional JS/TS SDK path setting.
.github/workflows/release.yml	Enables OIDC for npm publish via Craft; removes NPM_TOKEN usage.
.github/actions/setup-node/action.yml	Switches CI node setup to actions/setup-node + artifact caching changes.
packages/constants/package.json	Adds CJS/ESM outputs and exports map; updates build scripts accordingly.
packages/constants/tsconfig.json	Moves CJS build output to lib/cjs and expands excludes.
packages/constants/tsconfig.esm.json	Introduces ESM build config emitting to lib/esm.
packages/react-embed/tsconfig.build.json	Adjusts build tsconfig to better exclude tests and remove jest types from build.
packages/*/package.json (multiple)	Bumps TypeScript devDependency in several packages/examples; updates one example’s Node engine.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.