npm trusted publishing

[thepwagner]

Thank you for enabling --provenance ❤️ .

Have you considered using https://docs.npmjs.com/trusted-publishers to release instead of the long-lived secrets.NPM_TOKEN secret?