ci(release): switch to npm trusted publishing (OIDC)

Removes NPM_TOKEN secret dependency in favor of OpenID Connect
authentication. Requires configuring trusted publishing on npm.

Author: Mythie

.github/workflows/release.yml

@@ -13,6 +13,7 @@ jobs:
   release:
     name: Release & Publish
     runs-on: ubuntu-latest
+    environment: npm
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -54,5 +55,3 @@ jobs:
 
       - name: Publish to npm
         run: npm publish --provenance --access public --tag ${{ steps.dist-tag.outputs.tag }}
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}