ci: setup npm trusted publisher

Author: shoom3301

.github/workflows/npm.yml

@@ -1,5 +1,9 @@
 name: Publish NPM Package
 
+permissions:
+  id-token: write
+
+
 on:
   workflow_dispatch: # Trigger manually through GitHub Actions interface
 
@@ -8,7 +12,7 @@ on:
       - "v*" # Trigger on version tags (e.g., v1.0.0)
 
 env:
-  NODE_VERSION: lts/hydrogen
+  NODE_VERSION: lts/jod
 
 jobs:
   publish:
@@ -31,5 +35,3 @@ jobs:
 
       - name: Publish to npm
         run: scripts/publish-lib.sh
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}

lib/package.json

@@ -2,6 +2,11 @@
   "name": "@cowprotocol/cms",
   "version": "*** THE VERSION IS OVERRIDDEN AT PUBLISHING TIME ***",
   "description": "Cow Protocol CMS",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/cowprotocol/cms.git",
+    "directory": "lib"
+  },
   "main": "dist/lib.js",
   "types": "dist/lib.d.ts",
   "source": "src/lib.ts",