ci: migrate from NPM_TOKEN to OIDC Trusted Publishing

Author: h13

.github/workflows/publish-node.yml

@@ -2,9 +2,6 @@ name: Publish (Node.js)
 
 on:
   workflow_call:
-    secrets:
-      NPM_TOKEN:
-        required: true
 
 permissions:
   contents: write
@@ -27,8 +24,6 @@ jobs:
       - run: pnpm run build
       - run: pnpm test
       - run: pnpm publish --no-git-checks --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Create GitHub Release
         run: gh release view "$GITHUB_REF_NAME" || gh release create "$GITHUB_REF_NAME" --generate-notes