updating to use github action as trusted publisher

Author: catdad

.github/workflows/ci.yml

@@ -5,6 +5,10 @@ on:
   pull_request:
     branches: [master]
 
+permissions:
+  id-token: write
+  contents: read
+
 env:
   FORCE_COLOR: 1
 
@@ -23,8 +27,6 @@ jobs:
       - run: npm pack --dry-run
       - run: npm publish
         if: startsWith(github.ref, 'refs/tags/') && github.event_name != 'pull_request'
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.npm_token}}
       - uses: actions/upload-artifact@v4
         if: ${{ failure() }}
         with: