ci: force OIDC-only npm publish auth

Author: xsuneth

.github/workflows/publish.yml

@@ -60,3 +60,5 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_CONFIG_PROVENANCE: true
           NPM_CONFIG_ACCESS: public
+          NODE_AUTH_TOKEN: ""
+          NPM_TOKEN: ""