chore: set up trusted publisher

Author: wkillerud

.github/workflows/publish.yml

@@ -8,6 +8,12 @@ on:
       - beta
       - next
 
+permissions:
+  contents: write # to be able to publish a GitHub release
+  id-token: write # to enable use of OIDC for npm provenance, Trusted Publisher
+  issues: write # to be able to comment on released issues
+  pull-requests: write # to be able to comment on released pull requests
+  
 jobs:
   test:
     runs-on: ubuntu-latest