ci: fix if guard to use env for NPM_TOKEN; expose secrets.NPM_TOKEN at job env

.github/workflows/release.yml

@@ -271,6 +271,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     if: "!contains(github.event.head_commit.message, '[skip ci]')"
+    env:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
     steps:
       - name: Checkout code
@@ -370,9 +372,9 @@ jobs:
           ls -R "$stage_root"
 
       - name: Publish per-target npm binary packages
-        if: ${{ secrets.NPM_TOKEN != '' }}
+        if: ${{ env.NPM_TOKEN != '' }}
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ env.NPM_TOKEN }}
         shell: bash
         run: |
           set -euo pipefail