chore: set up github repo as trusted publisher

Author: BramKaashoek

.changeset/afraid-monkeys-fold.md

@@ -0,0 +1,5 @@
+---
+'react-loqate': patch
+---
+
+set up a trusted publisher

.github/workflows/release.yml

@@ -37,6 +37,11 @@ jobs:
     timeout-minutes: 15
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/main'
+    permissions:
+      id-token: write
+      contents: write
+      pull-requests: write
+    environment: release
     needs: lint-test-build
     steps:
       - name: Checkout
@@ -69,6 +74,9 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-pnpm-store-
 
+      - name: Upgrade npm for trusted publishing
+        run: npm i -g npm@^11.6.4
+
       - name: Create and publish versions
         uses: changesets/action@v1
         with:
@@ -77,5 +85,4 @@ jobs:
           publish: pnpm publish:ci
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true