chore(ci): move permissions to root of yml

Author: Vexcited

.github/workflows/publish.yml

@@ -5,14 +5,14 @@ on:
     tags:
       - "*.*.*"
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   publish:
     runs-on: ubuntu-latest
 
-    permissions:
-      contents: read
-      id-token: write
-
     steps:
       - uses: actions/checkout@v5
 
@@ -27,4 +27,4 @@ jobs:
 
       - run: |
           bun install --frozen-lockfile && bun run build
-          npm publish --provenance --access public
+          npm publish