Set up workflow permissions for trusted publishing

Author: harmony7

.github/workflows/publish_release.yml

@@ -4,6 +4,9 @@ on:
   release:
     types:
       - published
+permissions:
+  id-token: write
+  contents: read
 jobs:
   npm_release:
     runs-on: ubuntu-latest
@@ -25,8 +28,6 @@ jobs:
         run: npm install && npm version "${{ github.ref_name }}" --allow-same-version
       - name: Publish packages to npmjs.org
         working-directory: ./npm/@fastly
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
           for dir in *; do
             (