Create bot NPM account for publishing

[gregtyler]

We're currently publishing to NPM through a user's token, which is unnecessarily personal. We should create a bot NPM account and use a token from it to publish.

The new style of NPM access tokens expire after (max) a year, so we'll also need to be able to log into the account sporadically to regenerate the token.