npm Trusted Publishing fails with a 404, and the 404 is lying to you
Four failed release runs. A provenance step that succeeds while authentication fails. A token that looks exactly like a leaked secret but isn't. The actual cause was the Node version.