ci: Switch to trusted publishing

[mdjermanovic]

Prerequisites checklist

• I have read the contributing guidelines.

What is the purpose of this pull request?

Switch to Trusted Publishing.

What changes did you make? (Give an overview)

Infrastructure:

• Configured Trusted publisher on npmjs.com for all 8 packages.
• Set Publishing access to "Require two-factor authentication and disallow tokens" on npmjs.com for all 8 packages.
• Removed access to NPM_TOKEN for this repo on GitHub.

This PR:

• Updated the CODEOWNERS file to ensure that changes to release-please.yml require an approval from TSC.
• Updated release-please workflow to install the latest npm to ensure availability of trusted publishing.
• Removed NPM_TOKEN from the workflow.
• Removed manual-publish.yml file.

Related Issues

Closes #280

Is there anything you'd like reviewers to focus on?

Do we want to keep manual publishing? It seems that npmjs allows only one workflow file for trusted publishing, so we'd need to somehow incorporate it in release-please.yml.

[aladdin-add]

LGTM, thanks!

[aladdin-add]

Do we want to keep manual publishing? It seems that npmjs allows only one workflow file for trusted publishing, so we'd need to somehow incorporate it in release-please.yml.

I think it's fine to remove it. This job seems no longer necessary: it was created to fix #153, which has now been resolved. Would like @nzakas to verify.