align `NPM_TOKEN` with registry used by the project

[travi]

when the .npmrc defines the target registry as the github registry, use GITHUB_TOKEN instead of NPM_PUBLISH_TOKEN for the NPM_TOKEN used by semantic-release

[travi]

also consider that the registry will likely only be set for the scope of the package for the current project, rather than redefining the overall registry