Merge pull request #520 from kexi/develop

ci: bring NPM_TOKEN publish fallback to main

Merge pull request #493 from kexi/develop

chore: merge develop into main for v1.8.1

Merge pull request #466 from kexi/dependabot/github_actions/step-secu…

…rity/harden-runner-2.19.4

chore(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4

Merge pull request #488 from kexi/fix/nix-pnpm-deps-hash

fix(nix): update pnpmDeps hash to match current lockfile

Merge pull request #487 from kexi/chore/cache-nix-action

chore: add gitleaks secret scanning (pre-commit + CI)

Merge pull request #482 from kexi/develop

chore: merge develop into main for v1.8.0

Merge pull request #486 from kexi/chore/cache-nix-action

chore: switch Nix store cache from magic-nix-cache to cache-nix-action

Merge pull request #483 from kexi/chore/update-nix-flake-1.8.0-267187…

…98504-1

chore: update Nix flake to 1.8.0

Merge pull request #481 from kexi/release/v1.8.0

chore: release v1.8.0

Merge pull request #475 from kexi/develop

chore: merge develop into main for v1.7.1