ci: improve GitHub Actions workflow configurations

- Add pnpm installation steps to JSR publish workflow
- Add OIDC permissions for NPM publish workflow
- Remove deprecated NODE_AUTH_TOKEN environment variables

Author: jarvisjiang

.github/workflows/jsr-publish.yml

@@ -40,4 +40,6 @@ jobs:
         uses: actions/setup-node@v6
         with:
           node-version: latest
+      - run: npm install pnpm -g
+      - run: pnpm install
       - run: npx jsr publish --config jsr.json

.github/workflows/npm-publish-github-packages.yml

@@ -45,5 +45,3 @@ jobs:
       - run: npm install pnpm -g
       - run: pnpm install
       - run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.GITHUB_TOKEN}}

.github/workflows/npm-publish.yml

@@ -27,6 +27,11 @@ jobs:
   publish-npm:
     needs: test
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      id-token: write
+
     steps:
       - name: Checkout
         uses: actions/checkout@main
@@ -39,5 +44,3 @@ jobs:
       - run: npm install pnpm -g
       - run: pnpm install
       - run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.npm_token}}