ci: switch npm publish to OIDC Trusted Publishing

Override NODE_AUTH_TOKEN to empty so npm uses OIDC instead of
legacy token authentication. Trusted Publisher is configured
on npmjs.com for geolonia/geonicdb-cli + publish.yml.

Author: miya0001

.github/workflows/publish.yml

@@ -77,4 +77,7 @@ jobs:
             exit 1
           fi
       - run: npm run build
-      - run: npm publish --provenance
+      - name: Publish to npm (OIDC Trusted Publishing)
+        run: npm publish --provenance
+        env:
+          NODE_AUTH_TOKEN: ""