fix: packaging credentials

.github/workflows/package.yml

@@ -21,6 +21,7 @@ jobs:
         with:
           fetch-depth: 0
           ref: ${{ github.ref_name }}
+          persist-credentials: false
       - name: Package
         run: |
           npm ci