ci(publish): add temporary npm token auth

Inject NODE_AUTH_TOKEN into the publish workflow so the first npm release can be bootstrapped before trusted publishing is enabled for the package. This keeps the existing release automation intact while using a temporary NPM_TOKEN secret.

Author: AbhiPrasad

.github/workflows/publish.yml

@@ -120,6 +120,8 @@ jobs:
         run: pnpm run smoke
 
       - name: Publish to npm with provenance
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: pnpm publish --provenance --access public
 
       - name: Create and push release tag