Requires 2 secrets: CODECOV_TOKEN and NPM_AUTH_TOKEN.
Few notes:

• Tagged commits are published even if tests fail because CI and CD are different workflows. It could be possible to merge them to a single workflow, but currently there is no way to run job conditionally (https://github.community/t5/GitHub-API-Development-and/jobs-lt-job-id-gt-if-not-working/m-p/28980).
• GitHub currently provides only one style for readme badges, so I've changed others for consistency
• Some jobs have CI: true env, because ci-info doesn't support actions yet
• Codecov doesn't work on pull requests and has continue-on-error: true because:
  • It requires a token (even for public projects) and fails when token is not provided
  • Secrets aren't available for runs from forks
  • if: secrets.CODECOV_TOKEN != null doesn't work for some reason