npm Trusted Publishing fails with a 404, and the 404 is lying to you

npm is deprecating 2FA-bypass automation tokens: for account management in August 2026, and for...