fix: restore npm-production-publishing environment to release job

The environment configuration was accidentally removed in 5b4dd405, which
prevents the NPM_PUBLISH_TOKEN secret from being accessible during publishing.

This restores the environment block so the secret can be properly accessed.

Signed-off-by: Alex Hancock <alexhancock@block.xyz>

.github/workflows/publish-npm.yml

@@ -196,6 +196,9 @@ jobs:
     name: Release to npm
     runs-on: ubuntu-latest
     needs: [generate-schema, build-goose-binaries]
+    environment:
+      name: npm-production-publishing
+      url: https://www.npmjs.com/org/aaif
     steps:
       - name: Checkout
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4