[FalkWolsky]

Proposed changes

Fix SonarCloud's missing lowcoder-sdk:tests:3.0.0 dependency by building the Maven reactor through package, where the SDK test-helper JAR is attached. Keep test compilation enabled and skip test execution.

Print the pinned npm version and enable verbose publishing diagnostics so OIDC exchange failures reveal the registry's reason instead of only ENEEDAUTH. The missing npm trusted-publisher connections are configured separately.

Types of changes

• Bugfix (non-breaking change which fixes an issue)

Validation

• Java 17 Maven clean package -DskipTests passed all 22 modules, including the shared SDK test-helper JAR.
• All three workflow files parse; their shell steps pass syntax checks; the diff passes whitespace checks.
• npm publishing is being verified by rerunning the original failed jobs after configuring trusted publishers.

Further comments

This is the main-branch counterpart of #2184. SonarCloud uses pull_request_target, so checks for this PR initially execute the old base-branch workflow. The correction must land on main before a new PR event can validate the fixed workflow.