Align npm publish with trusted publishing and normalize package metadata (#18)

* fix(ci): set npm token for publish step

Agent-Logs-Url: https://github.com/hustcc/amapcn/sessions/70dde235-8ad9-4536-8684-162f1aeb035f

Co-authored-by: hustcc <7856674+hustcc@users.noreply.github.com>

* fix(ci): use oidc publish without npm token

Agent-Logs-Url: https://github.com/hustcc/amapcn/sessions/3be074a1-2d6d-4dbb-a097-9f378b17d06d

Co-authored-by: hustcc <7856674+hustcc@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: hustcc <7856674+hustcc@users.noreply.github.com>

Author: Copilot

.github/workflows/publish.yml

@@ -22,7 +22,6 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version: 20
-          registry-url: 'https://registry.npmjs.org'
 
       - name: Install dependencies
         run: pnpm install --prefer-frozen-lockfile