improve auth token resolution

[travi]

as highlighted in #777 (comment), our approach for building the temporary npmrc semantic-release uses when publishing has drifted a bit from the default approach used by npm.

• align approach for concatenating .npmrc files to better align with default npm behavior #791
• account for deprecation of _auth in existing .npmrc files #792