T09-03-TASK-01\n\nTrack: T09-03\nPhase: P09\nContracts: DEP-FRONTIER-MAINLINE-002, DEP-COHERENCE-007, DEP-PUBLIC-PACKAGE-008, MCP-PACKAGING-007, CI-ONE-COMMAND-006, SEC-SUPPLY-CHAIN-008, RELEASE-REPRODUCIBLE-010\n\nUse npm OIDC trusted publishing and remove long-lived token dependence.