ci: switch npm publishing to OIDC

Author: niejingchuan

.github/workflows/publish.yml

@@ -25,9 +25,5 @@ jobs:
         env:
           GITHUB_REF_NAME: ${{ github.ref_name }}
       - run: npm run verify
-      - name: Publish with npm provenance
-        run: |
-          [ -n "$NPM_TOKEN" ] && npm config set //registry.npmjs.org/:_authToken "$NPM_TOKEN"
-          npm publish --access public --provenance
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - name: Publish with npm trusted publishing
+        run: npm publish --access public