Add id-token: write for npm publishing

    if: github.repository_owner == 'galaxyproject'

    name: Build and Publish to NPM

    runs-on: ubuntu-latest

    permissions:

      id-token: write

    steps:

      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4