ci: force npm OIDC publishing

[badluck1024]

Summary

• Remove the setup-node registry configuration that creates a token-based npm user config.
• Clear token-related npm environment before npm publish so npm can use GitHub Actions OIDC.
• Keep explicit npm registry selection on the publish command.

Validation

• pnpm run check
• pnpm test
• pnpm run release:check

The previous v0.2.2 release runs failed before npm publication with npm E404. After this PR is merged, the v0.2.2 tag will be moved to the updated release commit and pushed again.