fix: remove expired NPM_TOKEN, use pure OIDC auth

Author: PatrickSys

.github/workflows/release-please.yml

@@ -63,7 +63,4 @@ jobs:
       - name: Publish to npm with provenance
         if: ${{ steps.release.outputs.release_created && env.SKIP_PUBLISH != 'true' }}
         run: pnpm publish --access public --no-git-checks --provenance
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-          # Note: Keep NPM_TOKEN during transition for fallback
-          # Remove after verifying OIDC works for one successful publish
+        # Using npm Trusted Publishers (OIDC) - no token needed!