Modernize npm Publishing & Auth

[roblarsen]

Prerequisites

• I have searched for duplicate or closed issues
• I have read the contributing guidelines

Describe the issue

The npm publishing workflow needs to be updated to comply with the 2025/2026 security standards. Classic long-lived tokens are deprecated or revoked.

To-Do List
[ ] Audit Tokens: Run npm token list to identify and remove any revoked "Classic" tokens.

[ ] Migrate to Granular Tokens: Replace existing CI/CD secrets with Granular Access Tokens (maximum 90-day life) or, ideally, OIDC (Trusted Publishing) for GitHub Actions.

Reduced test cases

No response

What operating system(s) are you seeing the problem on?

Windows

What browser(s) are you seeing the problem on?

Development Environment

What version of HTML% Boilerplate are you using?

v9.0.0