Support OIDC authentication

[gonzaloriestra]

Problem

NPM has deprecated classic tokens. Snapit needs to support OIDC authentication for NPM publishing.

Current Issue

When using OIDC configuration, Snapit fails with: Error: Please provide the NPM_TOKEN to the snapit GitHub action

Example: https://github.com/Shopify/cli/actions/runs/20166056272/job/57889600163

Requirements

• Support empty NPM_TOKEN for OIDC authentication
• Work with npm 11.5.1+ (required for OIDC)
• Support NPM_CONFIG_PROVENANCE: true
• Compatible with GitHub Actions' id-token: write permission

Impact

All repositories using Snapit are currently blocked from publishing snapshot releases as NPM tokens are no longer functional.

References

• NPM Trusted Publishers
• Shopify OIDC Migration Guide