Trusted publishing, and the bundle the README promised

NPM_TOKEN had never been set, so the workflow would have failed at the publish step. It now uses npm trusted publishing over OIDC — no long-lived credential stored anywhere. setup-node’s registry-url is deliberately dropped, since it writes an _authToken line that breaks OIDC.

The .mcpb is now packed and attached to the release the README already pointed people at.