use trusted publisher config

Author: noxify

.changeset/moody-tires-hunt.md

@@ -0,0 +1,5 @@
+---
+"@noxify/gitlab-ci-builder": patch
+---
+
+npm trusted publish

.github/workflows/ci.yml

@@ -22,6 +22,7 @@ permissions:
   pull-requests: read
   checks: write
   statuses: write
+  id-token: write # Required for OIDC
 
 # You can leverage Vercel Remote Caching with Turbo to speed up your builds
 # @link https://turborepo.org/docs/core-concepts/remote-caching#remote-caching-on-vercel-builds

.github/workflows/release.yml

@@ -8,6 +8,9 @@ on:
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
+permissions:
+  contents: read
+  id-token: write # Required for OIDC
 jobs:
   release:
     name: Release
@@ -31,4 +34,3 @@ jobs:
           publish: pnpm ci:publish
         env:
           GITHUB_TOKEN: ${{ secrets.CHANGESETS_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}