chore(ci): skip npm auth for hyper-flow release

HyperFlow never publishes to npm (publish: false), but the npm plugin's
verify step still demanded a token. With publishing moved to OIDC there
is no NPM_TOKEN anymore, so npmPublish: false makes the plugin skip the
auth check while keeping version bumps and GitHub releases.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: prc5

packages/hyper-flow/release.config.js

@@ -19,7 +19,9 @@ module.exports = {
   plugins: [
     "@semantic-release/commit-analyzer",
     "@semantic-release/release-notes-generator",
-    "@semantic-release/npm",
+    // npmPublish: false also skips the npm auth check. HyperFlow is not published to npm,
+    // and without a token (publishing goes through OIDC now) the default verify step fails.
+    ["@semantic-release/npm", { npmPublish: false }],
     "@semantic-release/github",
   ],
 };