Use OIDC for npm publish workflow

[coffeexcoin]

Summary

• Remove the NPM_TOKEN-based auth from .github/workflows/publish.yml.
• Rely on GitHub OIDC for npm provenance during publish.
• Drop the explicit npm registry configuration since the workflow no longer needs token-based registry auth.

Testing

• Not run (workflow-only change).
• Confirm the publish job still authenticates via OIDC in GitHub Actions.
• Confirm pnpm changeset:publish completes successfully with provenance enabled.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

3 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
agw-cli	Ignored		Apr 19, 2026 2:04am
agw-nextjs	Ignored		Apr 19, 2026 2:04am
mpp-demo	Ignored		Apr 19, 2026 2:04am