refactor(api): ♻️ Make SDK and client package only use resources in their own package

.github/workflows/staging.yml

@@ -1,50 +0,0 @@
-name: Staging build bundle
-
-on:
-    push:
-        branches: ["staging"]
-
-jobs:
-    tests:
-        runs-on: ubuntu-latest
-        permissions:
-            contents: read
-
-        steps:
-            - name: Checkout code
-              uses: actions/checkout@v4
-              with:
-                  submodules: recursive
-
-            - name: Setup Bun
-              uses: oven-sh/setup-bun@v2
-
-            - name: Install NPM packages
-              run: |
-                  bun install
-
-            - name: Build dist
-              run: |
-                  bun run build
-
-            - name: Bundle
-              run: |
-                  mkdir bundle
-                  cp -r dist bundle/
-                  cp -r config bundle/
-                  cp -r docs bundle/
-                  cp -r CODE_OF_CONDUCT.md bundle/
-                  cp -r CONTRIBUTING.md bundle/
-                  cp -r README.md bundle/
-                  cp -r flake.nix bundle/
-                  cp -r shell.nix bundle/
-                  cp -r flake.lock bundle/
-                  cp -r LICENSE bundle/
-                  cp -r SECURITY.md bundle/
-                  tar cfJ archive.tar.xz bundle/
-
-            - name: Upload
-              uses: actions/upload-artifact@v4
-              with:
-                  name: staging-dist
-                  path: archive.tar.xz

.github/workflows/test-publish.yml

@@ -0,0 +1,33 @@
+name: Test Publish
+
+on:
+    push:
+
+permissions:
+    contents: read
+    # For provenance generation
+    id-token: write
+
+jobs:
+    # Build job
+    build:
+        runs-on: ubuntu-latest
+        strategy:
+            matrix:
+                package: ["sdk", "client"]
+        steps:
+            - name: Checkout
+              uses: actions/checkout@v4
+
+            - uses: oven-sh/setup-bun@v2
+
+            - name: Install
+              run: bun install
+
+            - name: Publish to NPM
+              run: bun publish --dry-run
+              env:
+                  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+            - name: Publish to JSR
+              run: bunx jsr publish --allow-slow-types --allow-dirty --dry-run