npm 10.x has no native OIDC auth — requires npm 11+ for token-free publishing.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>