[codex] Use npm trusted publishing

[favoyang]

Summary

• grant the release job OIDC permissions for npm Trusted Publishing
• run release with modern Node/npm and semantic-release action tooling
• remove long-lived NPM_TOKEN usage and local semantic-release dependencies

Validation

• npm ci
• npm run build
• npm run test:unit
• npm run test:integration
• npm run test:e2e was run locally against Verdaccio and exposed existing remote package e2e flakiness
• GitHub Actions Run tests passed after rerunning the flaky Node 18 e2e job
• git diff --check

[favoyang]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Hooray!

Reviewed commit: bb6a752928

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".