ci: pin idempotent package publish template

[Jess Sullivan (Jesssullivan)]

Pins the shared js-bazel-package workflow to the TIN-713 idempotent publish template.

This keeps existing package publishes from failing when npmjs or GitHub Packages already has the same version.
Proof run: tinyland-inc/tinyland-stores/actions/runs/25092503866.

[greptile-apps]

Greptile Summary

This PR updates the pinned commit SHA for the shared js-bazel-package.yml reusable workflow from 82308d0 to f23f67b, referencing the TIN-713 idempotent publish template that gracefully handles re-publishing an already-existing package version to npmjs or GitHub Packages.

Confidence Score: 5/5

Safe to merge — single SHA bump to an idempotent publish template with no other changes.

The change is a one-line commit SHA update for a pinned reusable workflow. No logic, permissions, inputs, or secrets are modified, and the PR description references a successful proof run.

No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/publish.yml	Single-line SHA bump for the pinned reusable workflow reference; no logic, permissions, or inputs changed.

Sequence Diagram

sequenceDiagram
    participant GH as GitHub Release / workflow_dispatch
    participant PW as publish.yml
    participant CIT as ci-templates js-bazel-package.yml@f23f67b
    participant NPM as npmjs / GitHub Packages

    GH->>PW: trigger (release published or manual)
    PW->>CIT: call reusable workflow (idempotent publish template)
    CIT->>CIT: build, typecheck, test
    CIT->>NPM: publish (skip if version already exists)
    NPM-->>CIT: 200 OK or 409 Conflict (handled gracefully)
    CIT-->>PW: success

Loading

_{Reviews (1): Last reviewed commit: "ci: pin idempotent package publish templ..." | Re-trigger Greptile}