Use trusted publishing flow for publishing npm package (#1155)

Author: tcbegley

.github/workflows/release.yml

@@ -7,6 +7,7 @@ on:
 
 permissions:
   contents: write
+  id-token: write # Required for OIDC
 
 jobs:
   release:
@@ -56,8 +57,6 @@ jobs:
         run: just build
 
       - run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@v1.12.3