feat(ci): update release configuration for npm publishing using OIDC

[manusa]

Allows publishing the npm packages without the need for a token.

• https://github.blog/changelog/2025-09-29-strengthening-npm-security-important-changes-to-authentication-and-token-management/
• https://docs.npmjs.com/trusted-publishers

[matzew]

LGTM