[Migrate to trusted publishers and session-based auth](https://github.blog/changelog/2025-12-09-npm-classic-tokens-revoked-session-based-auth-and-cli-token-management-now-available/) https://docs.npmjs.com/trusted-publishers
