Use bunx npm publish for trusted publishing

bun publish does not pick up the OIDC token for npm trusted publishing.

Co-authored-by: Ona <no-reply@ona.com>

.github/workflows/publish.yml

@@ -4,10 +4,6 @@ on:
   release:
     types: [published]
 
-permissions:
-  id-token: write  # Required for OIDC
-  contents: read
-
 jobs:
   publish:
     runs-on: ubuntu-latest