Use npm trusted publishing (OIDC) instead of NPM_TOKEN

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: gabro

.github/workflows/release.yaml

@@ -43,7 +43,6 @@ jobs:
         uses: JS-DevTools/npm-publish@v3
         with:
           package: "dist/layout-components/package.json"
-          token: ${{ secrets.NPM_TOKEN }}
           access: "public"
           provenance: true