fix: restore OIDC auth setup for npm trusted publishing

Add back registry-url, remove _authToken from npmrc, and unset
NODE_AUTH_TOKEN so npm falls back to OIDC for authentication.
These were lost when the workflow was modified for beta tag support.

Author: nicknisi

.github/workflows/release.yml

@@ -30,8 +30,12 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version: 24
+          registry-url: 'https://registry.npmjs.org'
           cache: pnpm
 
+      - name: Remove token auth from npmrc (use OIDC instead)
+        run: sed -i '/_authToken/d' "$NPM_CONFIG_USERCONFIG"
+
       - name: Install
         run: pnpm install
 
@@ -50,4 +54,6 @@ jobs:
           fi
 
       - name: Publish
-        run: npm publish --tag ${{ steps.npm-tag.outputs.tag }} --access public --provenance
+        run: |
+          unset NODE_AUTH_TOKEN
+          npm publish --tag ${{ steps.npm-tag.outputs.tag }} --access public --provenance