Switch to OIDC trusted publishing, use GITHUB_TOKEN for changesets

Entire-Checkpoint: 813dff2ca8d2

Author: jeevanpillay

.github/workflows/release.yml

@@ -101,5 +101,4 @@ jobs:
           title: "chore: version packages"
           commit: "chore: version packages"
         env:
-          GITHUB_TOKEN: ${{ secrets.LIGHTFAST_RELEASE_BOT_GITHUB_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.LIGHTFAST_RELEASE_BOT_NPM_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

RELEASE.md

@@ -4,7 +4,7 @@ Both `@lightfastai/climode` and `@lightfastai/climode-mcp` are always published
 
 ## Prerequisites
 
-- npm automation token added as `NPM_TOKEN` secret in GitHub repo settings
+- Trusted publishing (OIDC) configured on npm for both packages, linked to `lightfastai/climode` + `release.yml`
 - `@changesets/cli` installed (`pnpm add -D @changesets/cli -w`)
 
 ## How to release