format workflows

clear default auth token in favor of id-token

testing npm publish

and publish workflow