Enable Trusted Publishing (#5302)

Author: penalosa

.github/workflows/release.yml

@@ -14,7 +14,10 @@ on:
         description: 'Is Prerelease'
         type: boolean
         default: false
-
+permissions:
+  id-token: write
+  contents: read
+  
 jobs:
   version:
     outputs:
@@ -288,8 +291,6 @@ jobs:
           LATEST_COMPATIBILITY_DATE: ${{ needs.version.outputs.date }}
       - run: echo '//registry.npmjs.org/:_authToken=${NPM_TOKEN}' > npm/workerd/.npmrc
       - run: cd npm/workerd && npm publish --access public --tag ${{ startsWith(needs.version.outputs.version, '0') && 'beta' || 'latest'}}
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}
 
   build-and-publish-types:
     runs-on: ubuntu-22.04
@@ -320,5 +321,3 @@ jobs:
       - run: cp npm/workers-types/oldest/* npm/workers-types
       - run: echo '//registry.npmjs.org/:_authToken=${NPM_TOKEN}' > npm/workers-types/.npmrc
       - run: cd npm/workers-types && npm publish --access public --tag ${{ startsWith(needs.version.outputs.version, '0') && 'beta' || 'latest'}}
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}