chore(ci): switch to OIDC trusted publishing, drop NPM_TOKEN

Bump @semantic-release/npm to v13 which has native OIDC support.
Remove NPM_TOKEN from workflow since trusted publishing handles auth.

Author: nigel-dev

.github/workflows/publish.yml

@@ -66,4 +66,3 @@ jobs:
           fi
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}