ci(github): remove npm token and use trusted publishing

Author: remarkablemark

.github/workflows/release-please.yml

@@ -35,13 +35,11 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v6
         with:
-          node-version-file: .nvmrc
+          node-version: lts
           registry-url: https://registry.npmjs.org
 
       - name: Install dependencies
         run: npm ci --prefer-offline
 
       - name: Publish
         run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package.json

@@ -37,7 +37,7 @@
     "lint:package": "publint",
     "lint:tsc": "tsc --noEmit",
     "prepare": "husky",
-    "prepublishOnly": "run-s lint lint:tsc test:server clean build lint:package",
+    "prepublishOnly": "run-s lint lint:tsc clean build lint:package",
     "size-limit": "size-limit",
     "test": "run-s test:server test:client",
     "test:client": "npm run test:client:watch -- --single-run",