publish to npm via trusted publishing

[mrhyde]

The npm automation token expired, and pnpm kept presenting it instead of falling back to OIDC, so publishing 8.1.0 failed with a misleading 404 on the token exchange. Trusted publishing is now configured on npmjs.com for both packages; dropping NODE_AUTH_TOKEN leaves OIDC as the only auth source. The NPM_TOKEN secret has been deleted.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.72%. Comparing base (e3d0f0c) to head (7bbd82f).

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #128   +/-   ##
=======================================
  Coverage   95.72%   95.72%           
=======================================
  Files          26       26           
  Lines         281      281           
  Branches       38       38           
=======================================
  Hits          269      269           
  Misses         12       12           

Flag	Coverage Δ
integration	84.69% <ø> (ø)
unit	42.34% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.