npm trust github Fails with 400 Bad Request: The Missing Permission Flag

We published a JavaScript client to npm this week, and wiring up trusted publishing cost three failed...