ci: set up publishing (#129)

.github/workflows/release.yml

@@ -14,6 +14,7 @@ jobs:
     environment: npm-publish
     permissions:
       contents: write
+      id-token: write  # Required for npm OIDC trusted publishing
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -108,6 +109,4 @@ jobs:
           fail_on_unmatched_files: true
 
       - name: Publish to npm
-        env:
-          NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: bun publish --access public --no-git-checks