Use npm trusted publishers

[jtpio]

Sibling issue: jupyterlab/jupyterlab#17993

Proposed Solution

• On https://www.npmjs.com, for each package, set up the trusted publisher with the following information:
  • Organization or user*: jupyter
  • Repository*: notebook
  • Workflow filename*: publish-release.yml
  • Environment name: release
• Wait for Update default Node.js version to 24.x jupyterlab/maintainer-tools#259 to be merged and released
  • Use Use Node.js 24 / npm 11 to publish releases #7749 while waiting for Support npm 11 jupyter-server/jupyter_releaser#617
• Delete the NPM_TOKEN secret from the repo
• Try make a new release: https://github.com/jupyter/notebook/actions/runs/18644636505/job/53149452930
• Enable the strictest security option on npm: "Require two-factor authentication and disallow tokens (recommended)"
• Remove jupyter-release-bot from the @jupyter-notebook org on npm

[jtpio]

https://github.com/jupyter/notebook/releases/tag/v7.5.0b1 was released with the npm trusted publishers: