X_TRUST_PUBLISHER_MISSING
Means
a published package has no OIDC trusted publisher
Typical cause
a package added after the trust rollout, or a config revoked on npmjs.com — release day then falls back to token auth, which this repo has no token for
Fix
bun run scripts/trust-publishers.ts