fix canary action

.github/workflows/npm-publish-canary.yaml

@@ -20,15 +20,28 @@ jobs:
 
     - run: yarn
 
-    - name: npm publish
+    - name: Set NPM token
       env:
         NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       run: |
         set -eou pipefail
         set -x
 
-        # npm auth
-        echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > .npmrc
+        # set token at npmrc - without making the git local copy dirty
+        echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" >> .npmrc
+        echo ".npmrc" >> .git/info/exclude
+        git update-index --assume-unchanged .npmrc
+
+    - name: Set git identity
+      run: |
+        # version git commit is not pushed, so this just needs to be configured
+        git config user.email "$(git log -1 --format='%ae')"
+        git config user.name "$(git log -1 --format='%an')"
+
+    - name: npm publish
+      run: |
+        set -eou pipefail
+        set -x
 
         # this will be the NPM dist-tag
         GIT_ID=$(echo "${{ github.head_ref }}" | sed 's/[^a-zA-Z0-9_-]/_/g')