chore: support trusted publishing

Author: captainsafia

.github/workflows/npm-release.yml

@@ -24,6 +24,9 @@ jobs:
         needs: test
         runs-on: ubuntu-latest
         if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/master')
+        permissions:
+            contents: write
+            id-token: write
         steps:
             - uses: actions/checkout@v4
               with:
@@ -32,9 +35,11 @@ jobs:
               with:
                   node-version: "24"
                   cache: "npm"
+                  registry-url: "https://registry.npmjs.org"
             - run: npm ci
             - run: npm run build
             - name: Release
               env:
                   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+                  NPM_CONFIG_PROVENANCE: true
               run: npx semantic-release