fix(ci): wire NPM_TOKEN into the npm publish step

The publish job failed with npm E404 on PUT for existing @pleaseai/code-*
packages: setup-node writes an .npmrc that reads NODE_AUTH_TOKEN, but the
Publish step never set it, so npm ran unauthenticated (placeholder token)
and the registry rejected the publish. Provide NODE_AUTH_TOKEN from the
NPM_TOKEN secret.

Author: amondnet

.github/workflows/release-please.yml

@@ -80,6 +80,8 @@ jobs:
         run: bun run build:npm
 
       - name: Publish to npm
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
           for dir in npm/code-*; do
             (cd "$dir" && npm publish --provenance --access public)