chore(release): revert to NPM_TOKEN usage vs OIDC Trusted Publish

Author: mikehardy

.github/workflows/publish.yml

@@ -55,6 +55,8 @@ jobs:
           echo "Syncing unpublished versions with package registry..."
           yarn lerna publish from-package --yes --loglevel trace
         env:
-          # No NPM token needed, all of the packages have been configured
+          # No NPM token should needed, all of the packages have been configured
           # on npmjs.com with this workflow file as an OIDC "Trusted Publisher"
+          # However, as of 20251208 it does not seem to work without it
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}