use npm token secret in publish workflow

Author: crush

.github/workflows/publish.yml

@@ -63,4 +63,4 @@ jobs:
       - if: steps.published.outputs.exists == 'false'
         run: cd packages/cruel && npm publish --access public --provenance
         env:
-          NODE_AUTH_TOKEN: ""
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}