chore: Add trusted publisher

[tiwarishubham635]

Fixes

Following the recent revocation of NPM classic tokens, this PR migrates the release process to use trusted publishers. Documentation: https://docs.npmjs.com/trusted-publishers
Since we are releasing using semantic-release which internally handles npm publish we are setting provenance as true explicitly.

Checklist

• I acknowledge that all my contributions will be made under the project's license
• I have made a material change to the repo (functionality, testing, spelling, grammar)
• I have read the Contribution Guidelines and my PR follows them
• I have titled the PR appropriately
• I have updated my branch with the main branch
• I have added tests that prove my fix is effective or that my feature works
• I have added the necessary documentation about the functionality in the appropriate .md file
• I have added inline documentation to the code I modified

If you have questions, please file a support ticket, or create a GitHub Issue in this repository.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Please retry analysis of this Pull-Request directly on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

This PR migrates the NPM publishing process from classic tokens to trusted publishers using OpenID Connect (OIDC) authentication, following NPM's recent revocation of classic tokens. The changes configure both the semantic-release plugin and GitHub Actions workflow to support provenance generation with OIDC.

Key changes:

• Added OIDC permissions and provenance configuration to enable trusted publishing
• Updated Node.js version from 18.x to 20 with npm@latest
• Replaced NPM_TOKEN secret with OIDC-based authentication using NPM_CONFIG_PROVENANCE

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
.releaserc.json	Configured @semantic-release/npm plugin with provenance enabled for attestation generation
.github/workflows/release.yml	Added OIDC permissions (id-token, contents), updated Node.js to v20, removed NPM_TOKEN in favor of NPM_CONFIG_PROVENANCE environment variable

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.