AB#125 Switch npm publish to OIDC Trusted Publishing

Remove NPM_TOKEN dependency, use pnpm -r publish with provenance.
Trusted Publishing configured per-package on npmjs.com.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: maciek-O-digiaidev

.github/workflows/publish.yml

@@ -70,7 +70,4 @@ jobs:
         run: pnpm build
 
       - name: Publish packages with provenance
-        run: pnpm changeset publish --provenance
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NPM_CONFIG_PROVENANCE: true
+        run: pnpm -r --filter '!./packages/viewer' --filter '!./packages/vscode-extension' --filter '!./packages/benchmarks' publish --access public --provenance --no-git-checks