fix(ci): remove NODE_AUTH_TOKEN for trusted publishing

OIDC-based trusted publishing handles auth via id-token permission;
the empty NODE_AUTH_TOKEN env var was overriding it and causing ENEEDAUTH.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: jheddings

.github/workflows/publish.yaml

@@ -36,5 +36,3 @@ jobs:
 
       - name: Publish to npm
         run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}