CLOUDPLAT-3162: add npm-release environment gate (cfn-config)

[haseebehsan]

Adding environment: npm-release to the npm release workflow.

[ox-security]

Successfully scanned changes introduced in a pull request into master from cloudplat-3162/npm-release-env.

Internal scan identifier: 8349f69a-e395-4443-99bd-3b246b61c65e.

Total issues	Blocking issues	Scan status
1	0	✔️

Category	Issues
CI/CD Posture	1

See all issues found during this scan in the OX Security Application.

Detailed information

Issue #	1
Name	Unpinned Reusable Workflow • GitHub Actions
Status	Old
Enforcement	Monitor
Severity	High
Category	CI/CD Posture
Source tools	OX CI/CD Posture
Recommendation	Pin reusable workflows to a full-length commit SHA (40 characters) instead of a tag or branch. Example: uses: org/repo/.github/workflows/build.yml@a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0

1 aggregation

File	Match
.github/workflows/npm-release.yml	uses: mapbox/gha-public/.github/workflows/workflow-npm-oidc-publish.yml@main