fix(cd): correct npm action to use the credentials when attempting to publish

Author: sg-gs

.github/workflows/publish-npm.yml

@@ -10,25 +10,29 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
+      id-token: write
       packages: write
 
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: '22.x'
           cache: yarn
 
+      - name: Add .npmrc
+        run: cp .npmrc.template .npmrc
+
       - name: Install dependencies
         run: yarn install
 
       - name: Build package
         run: yarn build
 
+      - name: Set the NPM registry with token
+        run: |
+          echo "registry=https://registry.npmjs.org/" > .npmrc
+          echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" >> .npmrc
+
       - name: Publish to NPM
-        run: npm publish --scope=@internxt --registry=https://registry.npmjs.org/ --access public --tag latest
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --scope=@internxt --access public