use oidc for npm publish

[Pugma]

as titled
merge 前に、こちら↓ の手順を npm 管理画面側からやっておく必要があります
https://docs.npmjs.com/trusted-publishers#for-github-actions

ついでに検証時に grep の -P が mac 環境で使えなくて落ちていたので、それも json 出力を使って記述を簡略化しました

[Copilot]

Pull Request Overview

This PR updates the npm publish workflow to use OpenID Connect (OIDC) authentication instead of token-based authentication. The changes modernize the authentication method and simplify several shell commands by using JSON output with jq parsing.

• Switches from NPM_TOKEN secret to OIDC authentication for npm publish
• Refactors shell commands to use JSON output with jq instead of complex grep/sed patterns
• Adds id-token: write permission required for OIDC authentication

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

The workflow removes NODE_AUTH_TOKEN but doesn't configure npm to use OIDC authentication. You need to add npm config set //registry.npmjs.org/:_authToken=$NPM_TOKEN where NPM_TOKEN is automatically provided by GitHub's OIDC, or configure the registry authentication in a separate step before publishing.