chore(release): use token-based npmjs publish for now

Temporarily admitting defeat on tokenless OIDC Trusted Publish

It was working, then stopped working approximately Nov 27. Why?
Unknown but I know a lot of reasons how it can not work now.

Author: mikehardy

.github/workflows/publish.yml

@@ -57,6 +57,9 @@ jobs:
         env:
           # No NPM token needed, all of the packages have been configured
           # on npmjs.com with this workflow file as an OIDC "Trusted Publisher"
+          # As of 20251208 tokenless OIDC Trusted Publish is not working.
+          # Unable to conclusively fix, using token for now. Expires 20250308
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           #
           # org admin Github Token required for the changelog/tag commit+push
           # to work via an exception to branch protection rules