Remove NPM_TOKEN

[pcothenet]

What

• Remove NPM_TOKEN for publishing, in favor of trusted publisher

Why

• https://github.blog/changelog/2025-09-29-strengthening-npm-security-important-changes-to-authentication-and-token-management/

SDK Release Checklist

• Have you added an integration test for the changes?
• Have you built the package locally and made queries against it successfully?
• Did you update the changelog?
• Did you bump the package version?
• If endpoints were removed, did you manually remove the corresponding files? (this should be rare)
• For breaking changes, did you plan for the release of the new SDK versions and deploy the API to production?