Remove NPM_TOKEN requirement from publish step, using OIDC instead (#298)

Author: ewgenius

.github/workflows/npm-publish.yml

@@ -65,6 +65,4 @@ jobs:
       - run: npm ci
       - run: node scripts/update-version.js # ensure the version in version.ts is updated
       - run: npm run build
-      - run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - run: npm publish # no token needed, using OIDC instead