Clear NODE_AUTH_TOKEN for npm publish steps

Explicitly set the `NODE_AUTH_TOKEN` environment variable to an empty string during `npm publish` in both production and RC release workflows. This prevents `npm` from attempting to use any inherited or implicitly available authentication tokens, ensuring consistent and predictable publishing of public packages.

Author: al-af

.github/workflows/production-release.yml

@@ -175,6 +175,7 @@ jobs:
         if: needs.validate-release.outputs.is_dry_run != 'true'
         env:
           VERSION: ${{ needs.validate-release.outputs.version }}
+          NODE_AUTH_TOKEN: ''
         run: |
           echo "Publishing version $VERSION to npm..."
           npm publish

.github/workflows/rc-release.yml

@@ -482,6 +482,8 @@ jobs:
 
       - name: Publish RC to npm
         if: ${{ needs.validate-release.outputs.is_dry_run != 'true' }}
+        env:
+          NODE_AUTH_TOKEN: ''
         run: npm publish --tag rc
 
   # ===========================================================================