ci: migrate npm publishing to OIDC

[seveibar]

Summary

• grant GitHub Actions OIDC publish permission
• update the Node setup used for npm trusted publishing
• remove the npm token from the release step
• add canonical repository metadata when missing

The matching npm trusted publisher will use organization tscircuit, repository file-server, and workflow bun-pver-release.yml.

[seveibar]

Closing this migration PR because the package has not been published to npm in the last three months; inactive packages are now excluded from this OIDC migration.