Fix release workflow: separate publish step for OIDC compatibility

The changesets/action publish parameter doesn't support npm OIDC. Split
publishing into a separate step that runs npx changeset publish with
NPM_CONFIG_PROVENANCE=true so npm authenticates via OIDC natively.

Author: brielov

.github/workflows/release.yml

@@ -28,10 +28,17 @@ jobs:
       - run: bun run build
 
       - name: Create release PR or publish
+        id: changesets
         uses: changesets/action@v1
         with:
           version: bun run version
-          publish: npx changeset publish --provenance
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Publish to npm
+        if: steps.changesets.outputs.hasChangesets == 'false'
+        run: |
+          npm config set registry https://registry.npmjs.org
+          npx changeset publish
+        env:
           NPM_CONFIG_PROVENANCE: "true"