Replace token-based npm authentication with OIDC Trusted Publishers
for improved security. This eliminates the need to manage NPM_TOKEN
secrets and provides automatic provenance attestations.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>