problem history
[npm trusted publishing] OIDC silently skipped when workflow lacks id-token: write, publish then fails with ENEEDAUTH/E404
Revision reasons are not recorded in this slice.