feat: enable trusted publishing for npm packages

[gyaneshgouraw-okta]

Summary

Switch npm publishing from token-based authentication to OIDC-based trusted publishing.

Changes

• Remove npm-token secret requirement from workflows and publish action
• Add id-token: write permission for OIDC authentication
• Update npm to v11 in the publish action (required for OIDC publishing)
• Remove --provenance flag and NODE_AUTH_TOKEN environment variable

Post-merge: Configure on npmjs.com

Package Settings → Trusted Publisher → GitHub Actions:

• Organization: auth0
• Repository: auth0-react
• Workflow: release.yml
• Environment: release

Benefits

• Eliminates need to manage long-lived npm tokens as secrets
• Leverages GitHub's OIDC provider for secure, short-lived credentials
• Simplifies secret management across repositories using the shared workflow