fix: improve publish auth and add debugging

[njsmith]

Fix the 401 error in the publish workflow:

• Use CARGO_REGISTRIES_CRATES_INTERNAL_TOKEN env var (more reliable than cargo login alone)
• Remove credential-provider config that may interfere with env var auth
• Add extensive debug step: token format check, curl tests, cargo config dump
• Keep cargo login as backup alongside env var