ci(workflows): remove private package registry config for @dependabot

- the required `.npmrc` file clashes with `.npmrc` files created in `publish` workflow
- private registry is not required, so a more verbose workaround is not required either

Signed-off-by: Lexus Drumgold <unicornware@flexdevelopment.llc>

Author: unicornware

.github/dependabot.yml

@@ -6,12 +6,6 @@
 
 ---
 version: 2
-registries:
-  github:
-    replaces-base: true
-    token: ${{ secrets.GH_TOKEN }}
-    type: npm-registry
-    url: https://npm.pkg.github.com/flex-development
 updates:
   - package-ecosystem: github-actions
     commit-message:
@@ -40,8 +34,6 @@ updates:
     labels:
       - scope:dependencies
       - type:build
-    registries:
-      - github
     reviewers:
       - flex-development/dependabot-review
       - flexdevelopment

.github/workflows/publish.yml

@@ -55,14 +55,14 @@ jobs:
           target: ${{ steps.version.outputs.result }}
   gpr:
     needs: metadata
+    permissions:
+      packages: write
     runs-on: ubuntu-latest
     environment:
       name: gpr
       url: |
         ${{ format('{0}/{1}/pkgs/npm/{2}', github.server_url, github.repository,
         github.event.repository.name) }}
-    env:
-      GITHUB_TOKEN: ${{ secrets.PAT_REPO }}
     steps:
       - id: checkout
         name: Checkout ${{ env.TAG }}
@@ -81,7 +81,7 @@ jobs:
         name: Publish package
         run: npm publish $ARTIFACT ${{ needs.metadata.outputs.dist-tag }}
         env:
-          NODE_AUTH_TOKEN: ${{ env.GITHUB_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   npm:
     needs: [metadata, gpr]
     runs-on: ubuntu-latest