[OB-75] setup packaging for @launchdarkly/observability sdks (#17)

## Summary

Prepare npm SDK repository for publishing using LD npm token.

launchdarkly/terraform#18409

## How did you test this change?

CI, will manually trigger action once merged

## Are there any deployment considerations?

no

## Does this work require review from our design team?

no
<!-- ld-jira-link -->
---
Related Jira issue: [OB-75: setup packaging for @launchdarkly
o11y](https://launchdarkly.atlassian.net/browse/OB-75)
<!-- end-ld-jira-link -->

Author: Vadman97

.github/actions/publish-npm/action.yml

@@ -0,0 +1,20 @@
+name: Publish to NPM
+description: Publish an npm package.
+inputs:
+    prerelease:
+        description: 'Is this a prerelease. If so, then the latest tag will not be updated in npm.'
+        required: false
+    dry-run:
+        description: 'Is this a dry run. If so no package will be published.'
+        required: false
+
+runs:
+    using: composite
+    steps:
+        - name: Publish
+          shell: bash
+          run: |
+              ./scripts/publish-npm.sh
+          env:
+              LD_RELEASE_IS_PRERELEASE: ${{ inputs.prerelease }}
+              LD_RELEASE_IS_DRYRUN: ${{ inputs.dry-run }}

.github/workflows/manual-publish.yml

@@ -0,0 +1,54 @@
+name: Manual Publish Package
+on:
+    workflow_dispatch:
+        inputs:
+            dry-run:
+                description: 'Is this a dry run. If so no package will be published.'
+                type: boolean
+                required: true
+            prerelease:
+                description: 'Is this a prerelease. If so, then the latest tag will not be updated in npm.'
+                type: boolean
+                required: true
+
+permissions:
+    id-token: write
+    contents: write
+concurrency: ${{ github.workflow }}-${{ github.ref }}
+jobs:
+    publish-package:
+        runs-on: ubuntu-latest
+        steps:
+            - uses: launchdarkly/common-actions/ssh-key-by-repo@main
+              with:
+                  repo_keys_map: |
+                      {
+                          "launchdarkly/observability-sdk": ${{ toJSON(secrets.LAUNCHDARKLY_OBSERVABILITY_SDK_DEPLOY_KEY) }},
+                          "launchdarkly/rrweb": ${{ toJSON(secrets.LAUNCHDARKLY_RRWEB_DEPLOY_KEY) }}
+                      }
+            - uses: launchdarkly/common-actions/init@main
+              env:
+                  GITHUB_TOKEN: ${{ github.token }}
+            - run: git submodule update --init --recursive
+
+            - name: Setup Node.js environment
+              uses: actions/setup-node@v4
+              with:
+                  node-version: lts/*
+                  cache: 'yarn'
+
+            - name: Install js dependencies
+              run: yarn
+
+            - uses: launchdarkly/gh-actions/actions/[email protected]
+              name: 'Get NPM token'
+              with:
+                  aws_assume_role: ${{ vars.AWS_ROLE_ARN }}
+                  ssm_parameter_pairs: '/production/common/releasing/npm/token = NODE_AUTH_TOKEN'
+
+            - id: publish-npm
+              name: Publish NPM Packages
+              uses: ./.github/actions/publish-npm
+              with:
+                  dry-run: ${{ inputs.dry-run }}
+                  prerelease: ${{ inputs.prerelease }}

.github/workflows/turbo.yml

@@ -58,12 +58,12 @@ jobs:
               env:
                   NPM_TOKEN: ${{ secrets.NPM_TOKEN_HIGHLIGHT_RUN }}
 
-            - name: Publish npm packages
+            - name: Publish highlight npm packages
               if: github.ref == 'refs/heads/main'
               id: changesets-publish
               uses: changesets/action@v1
               with:
-                  publish: yarn publish
+                  publish: yarn publish:highlight
               env:
                   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
                   NPM_TOKEN: ${{ secrets.NPM_TOKEN_HIGHLIGHT_RUN }}

package.json

@@ -23,7 +23,8 @@
 		"lint": "yarn run turbo lint --filter=!rrweb --filter=!rrvideo --filter=!@rrweb/rrweb-plugin-console-record --filter=!@rrweb/_monorepo --filter=!@rrweb/all --filter=!@rrweb/record --filter=!@rrweb/replay --filter=!@rrweb/types --filter=!@rrweb/packer --filter=!@rrweb/utils --filter=!@rrweb/web-extension --filter=!rrweb-snapshot --filter=!rrweb-player --filter=!rrdom --filter=!rrdom-nodejs --filter=!e2e-react-native",
 		"prepare": "husky",
 		"preinstall": "git submodule update --init --recursive || true",
-		"publish": "yarn workspaces foreach -R --no-private --from '@highlight-run/*' npm publish --access public --tolerate-republish && yarn workspace highlight.run npm publish --access public --tolerate-republish",
+		"publish": "yarn workspaces foreach -R --no-private --from '@launchdarkly/*' npm publish --access public --tolerate-republish --provenance",
+		"publish:highlight": "yarn workspaces foreach -R --no-private --from '@highlight-run/*' npm publish --access public --tolerate-republish --provenance && yarn workspace highlight.run npm publish --access public --tolerate-republish --provenance",
 		"test": "yarn turbo run test --filter=!rrweb --filter=!rrvideo --filter=!@rrweb/rrweb-plugin-console-record --filter=!@rrweb/_monorepo --filter=!@rrweb/all --filter=!@rrweb/record --filter=!@rrweb/replay --filter=!@rrweb/types --filter=!@rrweb/packer --filter=!@rrweb/utils --filter=!@rrweb/web-extension --filter=!rrweb-snapshot --filter=!rrweb-player --filter=!rrdom --filter=!rrdom-nodejs --filter=!nextjs"
 	},
 	"devDependencies": {

scripts/publish-npm.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+if $LD_RELEASE_IS_DRYRUN ; then
+  echo "Doing a dry run of publishing."
+else
+  if $LD_RELEASE_IS_PRERELEASE ; then
+    echo "Publishing with prerelease tag."
+    yarn publish --tag prerelease || { echo "npm publish failed" >&2; exit 1; }
+  else
+    yarn publish || { echo "npm publish failed" >&2; exit 1; }
+  fi
+fi