NPM_TOKEN-based publish 404s (token no longer valid for this repo).
Mirror the working OIDC workflow from zen-fs-gitee: id-token write +
npm publish --provenance, no NODE_AUTH_TOKEN. Requires the npm
Trusted Publisher for 'vue-note-editor' to be configured on npmjs.com
(repository weijia/vue-note-editor, workflow publish.yml).