fix(workflow): Correction to npm release workflow (#15)

Author: djonser

.github/workflows/release-npm.yml

@@ -10,6 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
+      id-token: write
     steps:
       - uses: actions/setup-node@v3
         with:
@@ -34,7 +35,7 @@ jobs:
         env:
           NPM_DIST_TAG: latest
           NPM_REGISTRY: registry.npmjs.org
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
           tarball=$(find ./dist/js -name "*.jsii.tgz" | sed 1q)
           npm publish $tarball --provenance --access public

.github/workflows/release.yml

@@ -61,6 +61,7 @@ if (releaseWorkflow) {
     with: {},
     permissions: {
       contents: JobPermission.READ,
+      idToken: JobPermission.WRITE,
     },
     secrets: {
       NPM_TOKEN: '${{ secrets.NPM_TOKEN }}',