#0 switch from classic npm token to trusted-publisher setup

Added permissions for OIDC and adjusted npm publish step.

Author: JoernBerkefeld

.github/workflows/npm-publish.yml

@@ -7,6 +7,10 @@ on:
     release:
         types: [published]
 
+permissions:
+  id-token: write  # Required for OIDC
+  contents: read
+
 jobs:
     build:
         runs-on: ubuntu-latest
@@ -28,7 +32,5 @@ jobs:
               with:
                   node-version-file: ./package.json
                   registry-url: https://registry.npmjs.org/
-            - run: npm ci
             - run: npm publish
-              env:
-                  NODE_AUTH_TOKEN: ${{secrets.npm_token}}
+