Permission tweaks for npm oidc trusted publishing (#6107)

Author: manojVivek

.github/workflows/ui-publish-components.yml

@@ -42,6 +42,9 @@ jobs:
     if: ${{ needs.skip-check.outputs.should_skip != 'true' }}
     runs-on: ubuntu-latest
     timeout-minutes: 30
+    permissions:
+      contents: read
+      id-token: write
     env:
       GITHUB_TOKEN: ${{ secrets.GH_PAT_UI }}
     steps:
@@ -64,6 +67,7 @@ jobs:
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: .node-version
+          registry-url: 'https://registry.npmjs.org'
           cache: 'pnpm'
           cache-dependency-path: ui/pnpm-lock.yaml