Modify GitHub Actions workflow for npm publish (#7582)

Author: achamayou

.github/workflows/npm.yml

@@ -4,7 +4,9 @@ on:
   release:
     types: [published]
 
-permissions: read-all
+permissions:
+  contents: read
+  id-token: write
 
 jobs:
   build_and_publish:
@@ -31,5 +33,4 @@ jobs:
         run: |
           set -ex
           cd js/ccf-app
-          echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > .npmrc
           npm publish microsoft-ccf-app*.tgz --access public