Reusable workflow callers set env/secrets that never reached `werf converge`. Accept optional NPM_TOKEN, fall back to Vault, export WERF_BUILD_ARG_NPM_TOKEN before converge.
dmitry.aloyan