ci: update workflows (#20)

Author: dines-rl

.github/workflows/ci.yml

@@ -1,10 +1,7 @@
 name: CI
 
 on:
-  push:
-    branches: [main, master, release-please--*]
   pull_request:
-    branches: [main, master]
 
 jobs:
   format:

.github/workflows/release.yml

@@ -25,6 +25,9 @@ jobs:
     needs: release
     if: ${{ needs.release.outputs.release_created == 'true' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write # Required for OIDC
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -43,7 +46,4 @@ jobs:
         run: npm run build
 
       - name: Publish to npm
-        run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-
+        run: npm publish --provenance --access public