Add a release workflow for @aehrc/questionnaire-test-toolkit

Mirrors publish_sdc_populate.yml apart from the package name and tag: triggered
by a GitHub Release, environment: npm, permissions id-token: write, and
npm publish --provenance --access public via npm OIDC trusted publishing. The
release tag is questionnaire-test-toolkit@<version>.

Nothing is published by merging this. The workflow only runs on a release, and
the package has never been released. Whether @aehrc/questionnaire-test-toolkit
should exist as a public name is AEHRC/CSIRO's decision, and trusted-publisher
configuration for a name that has never been published is an npm-org admin
action outside this repository.

Author: pavlushkin

.github/workflows/publish_questionnaire_test_toolkit.yml

@@ -0,0 +1,33 @@
+name: Publish @aehrc/questionnaire-test-toolkit
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  build-test-lint:
+    if: startsWith(github.ref_name, 'questionnaire-test-toolkit@')
+    uses: ./.github/workflows/build_test_lint.yml
+
+  publish:
+    name: Publish to npm
+    needs: build-test-lint
+    runs-on: ubuntu-latest
+    environment: npm
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+      - name: Use Node.js 24.x
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: npm
+          registry-url: 'https://registry.npmjs.org'
+      - name: Install dependencies
+        run: npm ci
+      - name: Build
+        run: npm run build -w packages/questionnaire-test-toolkit
+      - name: Publish
+        run: npm publish --provenance --access public
+        working-directory: packages/questionnaire-test-toolkit