[Omni] Publish npm package with trusted publishing

[numbers-official]

Summary

This updates .github/workflows/release.yml to publish the npm package using npm trusted publishing instead of the NPM_TOKEN repository secret. The publish job now requests a GitHub OIDC token so npm can verify the workflow identity, avoiding the need to rotate 90-day access tokens.

Changes

• Add contents: read and id-token: write permissions to the publish job in .github/workflows/release.yml.
• Remove token-based npm authentication from the release workflow.
• Keep the existing validation and publish flow while switching the npm authentication mechanism to trusted publishing.

2 files changed, +28 additions, -3 deletions

File changes

.github/workflows/release.yml     |  7 ++++---
 .omni/71327bb3-greeting/memory.md | 24 ++++++++++++++++++++++++

---

Generated by Olga Shen with Omni