switch npm package publishing to OIDC

[weiland]

Trusting publishers using OpenID Connect instead of tokens:

https://docs.npmjs.com/trusted-publishers

[weiland]

The v3.0.0-beta.4 was successfully published via GitHub Actions and OpenId.