CI: update workflow for NPM trusted publishing

Author: manisandro

.github/workflows/main.yml

@@ -1,6 +1,10 @@
 name: QWC2 Build
 on: [push]
 
+permissions:
+  id-token: write  # Required for OIDC
+  contents: write
+
 jobs:
     build:
       runs-on: ubuntu-latest
@@ -97,9 +101,8 @@ jobs:
       - name: Publish to NPM
         if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
         run: |
+          npm install -g npm@latest
           npm run dist
           pushd dist
           npm publish
           popd
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}