NO MORE TOKENS! LOCKING DOWN NPM PUBLISH WORKFLOWS

Summary from the TLDR Dev newsletter

Using extremely granular tokens limits the blast radius of any compromise.