fix: remove token to force trusted pub

Author: yeojz

.github/workflows/publish.yml

@@ -110,7 +110,7 @@ jobs:
       - name: Publish to npm
         run: npm publish --access public
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
 
       - name: Create GitHub Release
         run: gh release create "v${{ needs.publish-dry-run.outputs.version }}" --generate-notes