fix: wire npm auth into release publish

.github/workflows/reusable-release.yml

@@ -12,6 +12,9 @@ on:
         required: false
         type: boolean
         default: true
+    secrets:
+      NPM_TOKEN:
+        required: false
 
 permissions:
   contents: write
@@ -77,6 +80,8 @@ jobs:
 
       - name: Publish npm package
         if: steps.npm_publish_state.outputs.already_published != 'true'
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: npm publish --access public --provenance
 
       - name: Generate release highlights