fix: use local .npmrc and add token presence check

.gitea/workflows/npm-publish.yaml

@@ -19,7 +19,11 @@ jobs:
       - run: npm run build
       - name: Publish to npm
         run: |
-          echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
+          if [ -z "${NPM_TOKEN}" ]; then
+            echo "ERROR: NPM_TOKEN is empty! Check your Gitea Secrets."
+            exit 1
+          fi
+          echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > .npmrc
           npm publish --access public
         env:
           NPM_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}