fix action package exports and build ESM library entrypoints.

emit real ESM runtime + declaration outputs for programmatic imports, align package exports/types with built files, and add a no-cjs policy note.

Made-with: Cursor

.github/workflows/test-token.yml

@@ -1,6 +1,8 @@
 name: Test get-installation-token
 
 on:
+  push:
+    branches: [main]
   workflow_dispatch:
 
 permissions: