MET-4394 Use trusted publishing for the npm package

Author: devRoemer

.github/workflows/ci.yaml

@@ -4,6 +4,9 @@ on:
   push:
   workflow_dispatch:
 
+permissions:
+  id-token: write
+
 jobs:
   ci:
     name: ci
@@ -34,8 +37,5 @@ jobs:
       - if: startsWith(github.ref, 'refs/tags/')
         name: set package.json version by tag
         run: npm version --allow-same-version --no-commit-hooks --no-git-tag-version from-git
-      - if: startsWith(github.ref, 'refs/tags/') 
-        uses: JS-DevTools/npm-publish@v3
-        with:
-          token: ${{ secrets.NPM_API_KEY }}
-          package: sources/package.json
+      - if: startsWith(github.ref, 'refs/tags/')
+        run: npm publish