do not persist credentials

.github/workflows/cd.yaml

@@ -21,6 +21,11 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
+        with:
+          # persisting credentials breaks installing dependencies from private repos
+          persist-credentials: false
+          # fetch all history for all branches and tags
+          fetch-depth: 0
 
       - name: Use Node JS
         uses: actions/setup-node@v4
@@ -31,7 +36,6 @@ jobs:
           registry-url: 'https://npm.pkg.github.com/'
           scope: '@staffbase'
 
-      - run: echo "@staffbase:registry=https://npm.pkg.github.com" >> samples/weather-forecast/.npmrc
       - run: echo "//npm.pkg.github.com/:_authToken=${{ secrets.STAFFBOT_NPM_READ }}" >> samples/weather-forecast/.npmrc
 
       - name: Yarn install