use NPM "trusted publishers" instead of tokens #490
Description
Is your feature request related to a problem? Please describe
The CI pipelines uses a deprecated approach to publishing npm packages, and required manual effort every 90d to update the token.
Describe the solution you'd like
NPM has a better option based on OIDC: https://docs.npmjs.com/trusted-publishers
Describe alternatives you've considered
Runbooks, github issue templates
Additional context
Not many people have access to this repo, so the more automation the better.