chore(docs-theme): enable OIDC-based publishing to npm (#2085)

Closes #2083

Author: barjin

.github/workflows/publish-theme.yaml renamed to .github/workflows/publish-to-npm.yaml

@@ -6,6 +6,10 @@ on:
             - master
     workflow_dispatch:
 
+permissions:
+    id-token: write
+    contents: write
+
 jobs:
     look_for_change:
         if: ${{ !contains(github.event.head_commit.message, '[skip ci]') }}
@@ -17,7 +21,7 @@ jobs:
                 with:
                     fetch-depth: 0
 
-            -   name: Use Node.js 22
+            -   name: Use Node.js
                 uses: actions/setup-node@v6
                 with:
                     node-version: 24
@@ -45,11 +49,12 @@ jobs:
                 with:
                     token: ${{ secrets.APIFY_SERVICE_ACCOUNT_GITHUB_TOKEN }}
 
-            -   name: Use Node.js 22
+            -   name: Use Node.js
                 uses: actions/setup-node@v6
                 with:
                     node-version: 24
                     cache: 'npm'
+                    registry-url: 'https://registry.npmjs.org'
                     cache-dependency-path: 'package-lock.json'
                     always-auth: 'true'
 
@@ -62,9 +67,6 @@ jobs:
                     git config --global user.name "Apify Release Bot"
                     git config --global user.email "[email protected]"
 
-                    echo "access=public" > ~/.npmrc
-                    echo "//registry.npmjs.org/:_authToken=${{ secrets.APIFY_SERVICE_ACCOUNT_NPM_TOKEN }}" >> ~/.npmrc
-
             -   name: Bump the theme version
                 run: |
                     cd $GITHUB_WORKSPACE/apify-docs-theme
@@ -73,10 +75,7 @@ jobs:
             -   name: Deploy theme to npm
                 run: |
                     cd $GITHUB_WORKSPACE/apify-docs-theme
-                    npx -y publish-if-not-exists
-                env:
-                    GIT_USER: "barjin:${{ secrets.APIFY_SERVICE_ACCOUNT_GITHUB_TOKEN }}"
-                    GH_TOKEN: ${{ secrets.APIFY_SERVICE_ACCOUNT_GITHUB_TOKEN }}
+                    npm publish
 
             -   name: Wait until the new theme version is available on npm
                 run: |