Merge pull request #46 from devallibus/development

ci: switch npm publish to trusted publishing

Author: devallibus

.github/workflows/validate.yml

@@ -128,9 +128,7 @@ jobs:
           CURRENT=$(npm view @shaderbase/cli version 2>/dev/null || echo "0.0.0")
           LOCAL=$(node -p "require('./package.json').version")
           if [ "$CURRENT" != "$LOCAL" ]; then
-            npm publish --access public
+            npm publish --access public --provenance
           else
             echo "Version $LOCAL already published, skipping."
           fi
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}