chore: add release library and workflow

.github/workflows/release.yml

@@ -0,0 +1,32 @@
+name: release
+
+on:
+  workflow_dispatch:
+
+env:
+  node: 20
+
+permissions:
+  contents: write
+  id-token: write
+  issues: write
+  pull-requests: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: actions/setup-node@v3
+        with:
+          cache: npm
+          node-version: ${{ env.node }}
+      - run: npm ci
+      - run: npm audit signatures
+      - run: npm run release -- --npm.skipChecks
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

.release-it.json

@@ -0,0 +1,33 @@
+{
+  "git": {
+    "commit": true,
+    "commitMessage": "v${version}",
+    "push": true,
+    "requireBranch": "main",
+    "requireCommits": true,
+    "requireCommitsFail": true,
+    "tag": true,
+    "tagAnnotation": "v${version}"
+  },
+  "github": {
+    "comments": true,
+    "release": true,
+    "releaseName": "v${version}",
+    "web": false
+  },
+  "hooks": {
+    "before:init": "npm run typecheck",
+    "after:bump": "npm run build"
+  },
+  "npm": {
+    "publish": true
+  },
+  "plugins": {
+    "@release-it/conventional-changelog": {
+      "infile": "CHANGELOG.md",
+      "preset": {
+        "name": "conventionalcommits"
+      }
+    }
+  }
+}