Configure NPM trusted publisher

- Merge `prereleased.yaml` and `release.yaml` into one `publish.yaml`, because NPM supports only one trusted publisher.
- Publish package with the `next` tag if release event type is `prereleased`.

Author: amikheychik

.github/workflows/prerelease.yaml

@@ -1,7 +1,11 @@
-name: Release
+name: Publish
 on:
     release:
-        types: [released]
+        types: [prereleased, released]
+
+permissions:
+    id-token: write # Required for OIDC
+    contents: read
 
 jobs:
     npm:
@@ -23,13 +27,8 @@ jobs:
             - name: Run linters
               run: npm run lint:build
 
-            - name: Run tests
-              run: npm run test:build
-
             - name: Build package
               run: npm run dist
 
             - name: Publish package
-              run: npm publish ./dist
-              env:
-                  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+              run: npm publish ${{ github.event.action == 'prereleased' && '--tag next' || '' }} ./dist