Setup npm trusted publisher

[mtrezza]

NPM auth tokens are only valid for 90 days; preferred auth method now is:
https://docs.npmjs.com/trusted-publishers

[parse-github-assistant]

🚀 Thanks for opening this issue!