Update CI workflow to use OIDC npm tokens

Added permissions for id-token, contents, and pull-requests.

Author: shairez

.github/workflows/ci.yml

@@ -6,6 +6,11 @@ on:
     branches:
       - main
 
+permissions:
+  id-token: write
+  contents: write
+  pull-requests: write
+
 jobs:
   build-and-publish:
     runs-on: ubuntu-latest
@@ -53,6 +58,4 @@ jobs:
         with:
           publish: pnpm release
         env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}