ci: update publish step

Author: cmorten

.github/workflows/publish.yml

@@ -4,18 +4,19 @@ on:
   release:
     types: [created]
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
         with:
           node-version-file: .nvmrc
-          registry-url: https://registry.npmjs.org/
-          always-auth: true
+          registry-url: https://registry.npmjs.org
+          package-manager-cache: false
       - run: yarn install --frozen-lockfile
-      - run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.NODE_AUTH_TOKEN}}
-          CI: true
+      - run: npm publish