Use npm automation token instead of OIDC

Author: nihalwashere

.github/workflows/publish.yml

@@ -110,16 +110,14 @@ jobs:
     name: Publish to npm
     runs-on: ubuntu-latest
     needs: build
-    permissions:
-      contents: read
-      id-token: write
     steps:
       - uses: actions/checkout@v4
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
           node-version: 20
+          registry-url: https://registry.npmjs.org
 
       - name: Download all artifacts
         uses: actions/download-artifact@v4
@@ -139,15 +137,15 @@ jobs:
       - name: Move artifacts
         run: |
           cd crates/supermarkdown-napi
-          # Copy .node files from artifact subdirs to current dir
           find ../../artifacts -name "*.node" -type f -exec cp {} . \;
           ls -la *.node
 
       - name: Publish
         run: |
           cd crates/supermarkdown-napi
-          npm config set registry https://registry.npmjs.org/
-          npm publish --access public --provenance --ignore-scripts
+          npm publish --access public --ignore-scripts
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
   publish-crates:
     name: Publish to crates.io