ci: switch to npm trusted publishing (OIDC, no token)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: vikasprogrammer

.github/workflows/publish.yml

@@ -24,6 +24,4 @@ jobs:
       - run: npm run build
 
       - name: Publish to npm
-        run: npm publish --access public --tag beta
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --access public --tag beta --provenance