update to trusted publishing

Author: willwade

.github/workflows/publish.yml

@@ -7,13 +7,12 @@ on:
 
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   publish:
     if: ${{ github.event.release.prerelease == false }}
     runs-on: ubuntu-latest
-    env:
-      NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -26,13 +25,6 @@ jobs:
           node-version: "20"
           registry-url: "https://registry.npmjs.org"
 
-      - name: Validate npm token
-        run: |
-          if [[ -z "$NODE_AUTH_TOKEN" ]]; then
-            echo "NPM_TOKEN secret is not configured" >&2
-            exit 1
-          fi
-
       - name: Install dependencies
         run: npm ci
 
@@ -57,4 +49,4 @@ jobs:
           npm version "${{ steps.release_version.outputs.version }}" --no-git-tag-version
 
       - name: Publish to npm
-        run: npm publish
+        run: npm publish --access public --provenance