fix: use official npm OIDC trusted publishing (no token, no --provenance flag)

Author: Simplereally

.github/workflows/release.yml

@@ -27,10 +27,8 @@ jobs:
         id: version
         run: echo "version=$(node -p 'require("./package.json").version')" >> "$GITHUB_OUTPUT"
 
-      - name: Publish to npm with provenance
-        run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - name: Publish to npm
+        run: npm publish --access public
 
       - name: Create git tag
         run: |