Use npm CLI for trusted publishing (#11714)