ci(release): wire NPM_TOKEN to publish_cli as NODE_AUTH_TOKEN

OIDC trusted publishing requires WebAuthn to configure on the npm side.
Until a hardware security key is available, fall back to the classic
NPM_TOKEN secret so CI can publish @berkayorhan/bcode.

Author: Berkay2002

.github/workflows/release.yml

@@ -282,6 +282,8 @@ jobs:
         run: bun run build --filter=@t3tools/web --filter=@berkayorhan/bcode
 
       - name: Publish CLI package
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: node apps/server/scripts/cli.ts publish --tag "${{ needs.preflight.outputs.cli_dist_tag }}" --app-version "${{ needs.preflight.outputs.version }}" --verbose
 
   release: