renamed the token

.github/workflows/npm-publish.yml

@@ -8,6 +8,9 @@ on:
 jobs:
   build-and-publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write  # Ensure the Actions bot has write permission to the repository
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -32,7 +35,7 @@ jobs:
           git commit -m 'ci: bump version'
           git push
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.SECURITY_TOKEN }}
 
       - name: Publish to npm
         run: npm publish