Add support for 2FA in NPM

If 2-factor authentication is required to publish on NPM, smooth-release fails on the `npm publish` step. Running that step separately instead works, prompting for the OTP.

It would be nice to support 2FA (maybe by asking an OTP and retrying the `npm publish` command with the `--otp=<code>` argument).