Small change to registry fetch options

I don't believe we need to destructure the objects as we we're doing.

Author: reggi

lib/utils/oidc.js

@@ -133,17 +133,9 @@ async function oidc ({ packageName, registry, opts, config }) {
     let response
     try {
       response = await npmFetch.json(new URL(`/-/npm/v1/oidc/token/exchange/package/${escapedPackageName}`, registry), {
-        ...{
-          ...opts,
-          [authTokenKey]: idToken, // Use the idToken as the auth token for the request
-        },
+        ...opts,
+        [authTokenKey]: idToken, // Use the idToken as the auth token for the request
         method: 'POST',
-        headers: {
-          ...opts.headers,
-          'Content-Type': 'application/json',
-          // this will not work because the existing auth token will replace it.
-          // authorization: `Bearer ${idToken}`,
-        },
       })
     } catch (error) {
       if (error?.body?.message) {