fix(ci): declare NPM_TOKEN for reusable publish

Expose NPM_TOKEN as an optional workflow_call secret so step conditionals can reference secrets.NPM_TOKEN.

.github/workflows/manual-npm-publish.yml

@@ -21,6 +21,9 @@ on:
         required: false
         type: string
         default: dev
+    secrets:
+      NPM_TOKEN:
+        required: false
 
 permissions:
   contents: read