Restore beta releases with npm trusted publishing

The beta publish workflow uses GitHub Actions OIDC instead of the expired npm token.