fix: use OIDC for npm publish instead of token

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: cevr

.github/workflows/release.yml

@@ -34,4 +34,4 @@ jobs:
           version: bun run version
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_TOKEN: ""