ci: migrate from using NPM_TOKEN to npm's Trusted Publishers

Add id-token permission for GitHub Actions

Author: nodkz

.github/workflows/nodejs.yml

@@ -56,6 +56,7 @@ jobs:
       packages: write
       contents: write
       pull-requests: write
+      id-token: write
     steps:
       - uses: actions/checkout@v6
       - name: Use Node.js 24.x
@@ -70,5 +71,4 @@ jobs:
         run: npx semantic-release@19
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}