ci: Remove npm token in favor of trusted publishing

Author: juliaschiller150

.github/workflows/npm-publish.yml

@@ -4,6 +4,10 @@ on:
   push:
     branches:
       - "main"
+      
+permissions:
+  id-token: write  # Required for OIDC / NPM Trusted Publishing (https://repos.openssf.org/trusted-publishers-for-all-package-repositories)
+  contents: read
 
 jobs:
   quality-bump-and-publish:
@@ -37,5 +41,3 @@ jobs:
         run: npm run package
       - name: Publish to npm
         run: npm publish
-        env:
-          NPM_TOKEN: ${{secrets.NPM_TOKEN}}

.npmrc

@@ -1 +1 @@
-//registry.npmjs.org/:_authToken=${NPM_TOKEN}
+//registry.npmjs.org/