publish: use trusted published

[bjohansebas]

Codemod now supports publishing via GitHub Actions OIDC. No API keys required.

ref: https://docs.codemod.com/publishing#trusted-publishers