darwin-x64/linux-x64/linux-arm64/win32-x64/win32-arm64 have never
been published, and npm trusted publishing requires a package to
already exist. Publish this one release with NPM_TOKEN so every
package exists, then remove the token and rely on OIDC going forward.