refactor: introduce trusted publishing #2612

Job	Run time
dependency-review / dependency-review	6s
codeql / Analyze (javascript)	1m 7s
labeler / triage	4s
auto-merge / dependabot	-1s
self-healing-dependabot-updates / format	-1s
	1m 15s

Provide feedback