ci(release): switch to npm Trusted Publishing

Drop NODE_AUTH_TOKEN / NPM_TOKEN in favor of OIDC-based trusted
publishing. id-token: write already provides the OIDC token; npm
detects it automatically. Upgrade npm to latest because Node 20
ships npm 10, and trusted publishing needs >= 11.5.1. Provenance
is implicit with trusted publishing, so the --provenance flag is
no longer needed.

Requires a Trusted Publisher entry for this package on npmjs.com
(GitHub Actions, repo joinflux/capacitor-sensitive-screen, workflow
publish.yml) before this release will succeed.

Author: gugahoi

.github/workflows/publish.yml

@@ -28,11 +28,12 @@ jobs:
             exit 1
           fi
 
+      - name: Upgrade npm for Trusted Publishing
+        run: npm install -g npm@latest
+
       - run: npm ci
       - run: npm run build
-      - run: npm publish --access public --provenance
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - run: npm publish --access public
 
       - name: Create GitHub Release
         env: