Upgrade publish action

[stefangutica]

Reasoning

• Update the publishing flow to use npm provenance and OIDC-based publishing.
• Remove the NPM token from secrets.env and align package manifests with the new release setup.

Proposed Changes

• Add "provenance": true under publishConfig in all publishable package manifests.
• Update the GitHub Actions publish workflows to use the new npm publishing permissions.
• Remove the NPM token from secrets.env.

How to test

• Run the publish workflow in GitHub Actions.
• Confirm all packages publish successfully to npm with provenance enabled.