chore: update GH actions to use trusted publisher (#3161)

Author: Raubzeug

.github/workflows/publication.yml

@@ -4,6 +4,11 @@ on:
 
 name: Publication
 
+permissions:
+  contents: write
+  id-token: write
+  packages: write
+
 jobs:
   publication:
     runs-on: ubuntu-latest
@@ -18,7 +23,8 @@ jobs:
       - run: npm ci
       - run: npm publish
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}
+          NODE_AUTH_TOKEN: ''
+          NPM_TOKEN: ''
       - run: npm run build:embedded:archive
       - run: gh release upload ${{ github.event.release.tag_name }} $ASSET_NAME.zip
         env: