Switch to trusted publishing via OIDC (#16)

- Add id-token: write permission for OIDC trusted publishing
- Use Node 24 (ships npm 11.11.0, trusted publishing requires >=11.5.1)
- Add registry-url for OIDC auth flow
- Upgrade JS-DevTools/npm-publish from v1 to v4
- Remove NPM_AUTH_TOKEN (no longer needed)

Co-authored-by: rom1504 <[email protected]>
Co-authored-by: Claude Opus 4.6 (1M context) <[email protected]>

Author: rom1504

.github/workflows/npm-publish.yml

@@ -3,6 +3,9 @@ on:
   push:
     branches:
       - master # Change this to your default branch
+permissions:
+  id-token: write
+  contents: write
 jobs:
   npm-publish:
     name: npm-publish
@@ -16,10 +19,9 @@ jobs:
       uses: actions/setup-node@master
       with:
         node-version: 14.0.0
+        registry-url: 'https://registry.npmjs.org'
     - id: publish
-      uses: JS-DevTools/npm-publish@v1
-      with:
-        token: ${{ secrets.NPM_AUTH_TOKEN }}
+      uses: JS-DevTools/npm-publish@v4
     - name: Create Release
       if: steps.publish.outputs.type != 'none'
       id: create_release