Publish all artifacts / release from the repo itself using workflows

[netomi]

Currently, making a release (including -rc versions) as done either manually or from a separate repository.

This should be fully done from within this repo with attached attestation that the released artifacts come from this repo.

An example workflow how to do that can be found here: https://github.com/eclipse-csi/otterdog/blob/main/.github/workflows/publish.yml

We also should enable trusted publishing for npm packages to avoid pushing tokens to the repo.