v5.0.0
fix: use npm trusted publishers (OIDC provenance) instead of token auth - Remove NODE_AUTH_TOKEN secret dependency - Add --provenance flag for OIDC-based publishing - Relies on id-token: write permission (already configured) - Requires trusted publisher config on npmjs.com