oh eat my entire ass, npm

once they implement that i'm just going to put username and password into the github publishing workflow. i am *not* going to manually swap tokens, not every 7 days, not every 90

edit: ok, they have Trusted Publishing support which makes this more bearable

good news: you can use Trusted Publishing to avoid dealing with the tokens

bad news: do you think github's own instructions for how to set this shit up on github work? yes? hahaha no of course they fucking don't imagine anybody involved in this mess doing their job well