use npm trusted publishing (#904)

Signed-off-by: Brian DeHamer <[email protected]>

Author: bdehamer

.changeset/weak-ads-lick.md

@@ -0,0 +1,2 @@
+---
+---

.github/workflows/release.yml

@@ -27,6 +27,9 @@ jobs:
           registry-url: 'https://registry.npmjs.org'
           cache: npm
 
+      - name: Install npm w/ OIDC support
+        run: npm install -g npm/cli#oidc
+
       - name: Install dependencies
         run: npm ci
 
@@ -36,4 +39,3 @@ jobs:
           publish: npm run release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}