ci: trusted publishing permissions

[birkskyum]

Add OIDC permissions for npm trusted publishing.

• id-token: write - lets GitHub generate the OIDC token that npm needs for trusted publishing
• contents: write - needed for changesets to push version bumps and create GitHub releases
• pull-requests: write - needed for changesets to create/update the "Version Packages" PR

Also sets registry-url on setup-node so npm picks up the OIDC auth.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 25fb0a1

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/vite-plugin-solid@246

commit: db4b7df