Multiple trusted publishing configurations for npm

npm now allows multiple trusted publishing (OIDC) configurations per package, enabling separate workflows for stable, prerelease, or staging releases. The update also adds staged package history in the versions tab and disables direct publishing until malware scans finish. Configurations are additive, independent, and can be managed via the package settings page.