fix(ci): use OIDC for npm publish instead of token auth (#10619)

* fix(ci): use OIDC for npm publish instead of token auth

* Change permissions from write to read for contents

---------

Co-authored-by: Jay <jasonsaayman@gmail.com>

.github/workflows/publish.yml

@@ -6,7 +6,7 @@ on:
       - 'v1.*.*'
 
 permissions:
-  contents: write
+  contents: read
   id-token: write
 
 jobs:
@@ -27,5 +27,3 @@ jobs:
         run: npm run build
       - name: Publish to NPM
         run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}