Please use trusted publishing

[tnkuehne]

Following recent hacks on npm packages caused by stolen npm tokens, I would appreciate it if you could also switch to trusted publishing, like the rest of the Svelte suite.

Thanks for all the maintenance.