fix: enable cross-workflow artifact downloads in publish workflow

The Publish workflow was failing to download artifacts from the Main
workflow because actions/download-artifact@v4 defaults to downloading
only from the current workflow run.

Added run-id and github-token parameters to all download-artifact steps
to enable cross-workflow artifact access. This allows the Publish
workflow to correctly download NPM packages and Docker images that were
built and tested in the Main workflow.

This fixes the "Artifact not found" errors in v1.10.8 and future releases.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: sapientpants

.changeset/fix-cross-workflow-artifacts.md

@@ -0,0 +1,7 @@
+---
+'sonarqube-mcp-server': patch
+---
+
+Fix cross-workflow artifact downloads by adding run-id parameter
+
+The Publish workflow was unable to download artifacts from the Main workflow because the actions/download-artifact@v4 action defaults to only downloading artifacts from the current workflow run. Added the run-id and github-token parameters to all three download steps (NPM, GitHub Packages, and Docker) to enable cross-workflow artifact access.

.github/workflows/publish.yml

@@ -103,6 +103,8 @@ jobs:
         with:
           name: ${{ steps.artifact.outputs.artifact_name }}
           path: ./npm-artifact
+          run-id: ${{ steps.artifact.outputs.run_id }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Use pre-built package or build from source
         run: |
@@ -221,6 +223,8 @@ jobs:
         with:
           name: ${{ steps.artifact.outputs.artifact_name }}
           path: ./npm-artifact
+          run-id: ${{ steps.artifact.outputs.run_id }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Use pre-built package or build from source
         run: |
@@ -328,6 +332,8 @@ jobs:
         with:
           name: ${{ steps.artifact.outputs.artifact_name }}
           path: ./docker-artifact
+          run-id: ${{ steps.artifact.outputs.run_id }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Verify artifact exists
         if: steps.check-docker.outputs.has_credentials == 'true'