ci(release): update permissions for OIDC and clean up

Author: codehz

.github/workflows/release.yml

@@ -4,6 +4,10 @@ on:
   release:
     types: [published]
 
+permissions:
+  id-token: write  # Required for OIDC
+  contents: read
+
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -29,5 +33,3 @@ jobs:
       - name: Publish
         working-directory: dist
         run: bun publish --access public
-        env:
-          NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}