ci: modify workflow .yaml to work with Trusted Publisher

[tanjeemh]

Summary:
This PR updates the GitHub Actions release workflow to use npm Trusted Publishing (OIDC) instead of long-lived NPM_TOKEN secrets.

Changes:

• Added permissions: id-token: write for OIDC-based publishing.
• Removed NPM_TOKEN from the release job.

Why:
This change aligns with BitGo’s initiative to eliminate long-lived tokens and use GitHub’s OIDC-based authentication for npm publishing.
Trusted Publishers were configured in npmjs for all relevant repos.

Expected outcome:

• Future releases will publish securely through GitHub’s OIDC workflow.
• NPM_TOKEN secrets are no longer required.
• npm packages will show “Verified provenance” badges after the next release.

Ticket: DX-2081