Remove staging workflow - publish directly to latest tag.
Uses granular access token with publish permissions and 2FA bypass.

- Single job publishes to npm on tag push
- Includes provenance for supply chain security
- No manual promotion step needed

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>