fix: remove NPM_TOKEN, use OIDC trusted publisher only

Author: yhk1038

.github/workflows/release.yml

@@ -76,8 +76,6 @@ jobs:
 
       - name: Publish to npm
         run: npm publish --access public --provenance
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Create Release
         uses: softprops/action-gh-release@v2