chore: remove NPM_TOKEN secret, use trusted publisher OIDC auth for npm publish

Agent-Logs-Url: https://github.com/albe/node-event-storage/sessions/48f7d516-e24f-49b8-b29a-1f2207bf1d15

Co-authored-by: albe <4259532+albe@users.noreply.github.com>

Author: Copilot

.github/workflows/npm-publish.yml

@@ -85,5 +85,3 @@ jobs:
           registry-url: 'https://registry.npmjs.org'
       - run: npm ci
       - run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}