fix: clear stale auth token before npm publish for trusted publishing

Author: dorlugasigal

.github/workflows/release.yml

@@ -94,11 +94,16 @@ jobs:
 
       - name: Publish to npm
         if: inputs.dry-run == false
-        run: npm publish --provenance --access public
+        run: |
+          # Remove any auth token from .npmrc so npm uses OIDC Trusted Publishing
+          npm config delete //registry.npmjs.org/:_authToken || true
+          npm publish --provenance --access public
 
       - name: Publish to npm (dry run)
         if: inputs.dry-run == true
-        run: npm publish --provenance --access public --dry-run
+        run: |
+          npm config delete //registry.npmjs.org/:_authToken || true
+          npm publish --provenance --access public --dry-run
 
       - name: Create GitHub Release
         if: inputs.dry-run == false