Migrate npm publishing from access tokens to OICD

<img width="2056" height="70" alt="Image" src="https://github.com/user-attachments/assets/aac28ea7-b996-41c9-9479-b8f6ebf25a44" />

---

It broke CI/CD today as old token has been revoked. Follow those steps: https://docs.npmjs.com/trusted-publishers#supported-cicd-providers