chore: bump version to 1.0.4

chore: bump version to 1.0.3 — security + CI hardening release

chore: bump version to 1.0.2

chore: bump version to 1.0.1 for npm republish

ci: add release.yml — auto tag, test, build & publish to npm