chore: use trusted publishing

Author: Minishlink

.github/actions/setup/action.yml

@@ -8,6 +8,7 @@ runs:
       uses: actions/setup-node@v4
       with:
         node-version-file: .node-version
+        registry-url: "https://registry.npmjs.org"
 
     - run: corepack enable
       shell: bash

.github/workflows/onRelease.yml

@@ -4,6 +4,10 @@ on:
   release:
     types: [published]
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -24,7 +28,5 @@ jobs:
             echo "NPM_TAG=latest" >> $GITHUB_OUTPUT
           fi
 
-      - uses: JS-DevTools/npm-publish@19c28f1ef146469e409470805ea4279d47c3d35c
-        with:
-          token: "${{ secrets.NPM_TOKEN }}"
-          tag: ${{ steps.set-npm-tag.outputs.NPM_TAG }}
+      - name: Publish
+        run: npm publish --tag ${{ steps.set-npm-tag.outputs.NPM_TAG }}