Use OIDC for npm publish

[jakubno]

Note

Migrate npm publish to OIDC and upgrade workflows to Node 22 with updated npm, plus minor publish/push tweaks.

• CI/Workflows:
  • Use OIDC for npm publish:
    • Add permissions: id-token: write.
    • Remove NPM_TOKEN secret; set NPM_TOKEN: "" in changesets/action env.
  • Upgrade Node/tooling:
    • Switch to actions/setup-node@v6 with Node 22.x; add registry-url and pnpm cache.
    • Add step to update npm to ^11.6.
  • Publish workflow tweaks:
    • Push commit after releasing generated sdk-reference.

^{Written by Cursor Bugbot for commit 196e3f2. This will update automatically on new commits. Configure here.}

[linear]

ENG-3226 Use oidc for npm publish