chore: publish npm packages using trusted publishing

Author: jviide

.changeset/loud-cups-hammer.md

@@ -0,0 +1,5 @@
+---
+"@badrap/libapp": patch
+---
+
+Publish npm packages using trusted publishing

.github/workflows/version-or-publish.yml

@@ -23,6 +23,7 @@ jobs:
         with:
           node-version: 22
           cache: npm
+          registry-url: "https://registry.npmjs.org"
       - run: npm ci
       - run: npm run lint
       - run: npm run typecheck
@@ -43,6 +44,10 @@ jobs:
         with:
           node-version: 22
           cache: npm
+          registry-url: "https://registry.npmjs.org"
+      # Ensure npm 11.5.1 or later is installed for OIDC authentication.
+      - name: Update npm
+        run: npm install -g npm@latest
       - name: Install dependencies
         run: npm ci
       - name: Create Release Pull Request or Publish to npm
@@ -53,4 +58,3 @@ jobs:
           publish: npm run release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}