[CI] - Use npm Trusted Publishing (OIDC) instead of token

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: maatheusgois-dd

.github/workflows/release.yml

@@ -18,6 +18,7 @@ on:
 
 permissions:
   contents: write
+  id-token: write
 
 jobs:
   ci:
@@ -80,6 +81,10 @@ jobs:
     needs: [ci, create-tag]
     if: always() && needs.ci.result == 'success' && (needs.create-tag.result == 'success' || needs.create-tag.result == 'skipped')
     runs-on: ubuntu-latest
+    environment: npm
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v5
         with:
@@ -97,8 +102,6 @@ jobs:
 
       - name: Publish
         run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
   github-release:
     name: GitHub Release