Security: require 2FA for publish

.gitignore

@@ -12,3 +12,4 @@ coverage
 !.yarn/versions
 .turbo
 .DS_Store
+publish.env

CONTRIBUTING.md

@@ -73,8 +73,16 @@ yarn demo
 
 ## Publishing new versions
 
-Note: This can only be done by someone with permission to the org on `npm`.
+Note: This can only be done by someone with permission to the org on `npm` and requires 2FA setup.
 
 ```sh
-yarn lerna publish
+yarn publish
 ```
+
+You'll need to add a `./publish.env` at the root of the repo. And inside define your 2FA codes:
+
+```
+NPM_CONFIG_OTP=""
+```
+
+The publish alias relies on 1password for developer to fetch the private information.

package.json

@@ -53,6 +53,7 @@
     "internals/*"
   ],
   "scripts": {
+    "publish": "op run --env-file='./publish.env' -- yarn lerna publish",
     "demo": "node --watch-path=packages/ packages/demo/dist/esm/index.js",
     "dev": "turbo watch tsc",
     "prepare": "husky && turbo tsc attw",