publish-npm.yml - Ensure top-level permissions are not set to write-all

## publish-npm.yml - Ensure top-level permissions are not set to write-all
<img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Violation detected in /.github/workflows/publish-npm.yml:[15-16]

:page_with_curl: File Type: github_actions

:no_entry: Details - Ensure top-level permissions are not set to write-all