test(ci): bypass proto shims to test OIDC compatibility

This PR tests if npm OIDC works when we bypass proto/moonrepo shims entirely.

Changes:
- Replace moonrepo/setup-toolchain with actions/setup-node
- Install npm 11.6.2 directly (no proto shim)
- Install pnpm 10.17.1 directly (no proto shim)
- Install moon 1.39.1 directly (no proto shim)
- Keep GarthDB/changesets-action@v1.6.8 with oidcAuth: true

Purpose:
After exhaustive testing (v1.6.4-v1.6.8, PR #687), we've confirmed:
✅ OIDC environment variables ARE present in GitHub Actions
✅ npm 11.6.2 is the correct version
✅ Trusted publishers are configured correctly
❌ npm can't authenticate through proto shim chain

This test will definitively show if proto shims are the blocker.

Expected outcomes:

If this WORKS (✅ npm publishes successfully):
→ Proto shims are confirmed as the issue
→ We have two options:
  1. Use this direct install approach (no proto in release workflow)
  2. File bug with proto/moonrepo about OIDC support

If this FAILS (❌ still ENEEDAUTH):
→ Something else is wrong with OIDC setup
→ Fall back to NPM_TOKEN

Related:
- All v1.6.x attempts: ENEEDAUTH with proto
- PR #687: Confirmed OIDC vars present in shell
- PR #688: v1.6.8 still failed with proto

Author: GarthDB

.github/workflows/release.yml

@@ -19,10 +19,16 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: moonrepo/setup-toolchain@v0
+      # Set up Node.js without proto to test OIDC compatibility
+      - uses: actions/setup-node@v4
         with:
-          auto-install: true
-      # npm 11.6.2 configured in .prototools for OIDC support
+          node-version: "20.17.0"
+      # Install npm 11.6.2 (required for OIDC) - bypassing proto
+      - run: npm install -g npm@11.6.2
+      # Install pnpm directly
+      - run: npm install -g pnpm@10.17.1
+      # Install moon directly (bypassing proto)
+      - run: npm install -g @moonrepo/cli@1.39.1
       - run: moon setup
       - run: moon run :build --query "projectSource~packages/*"
       - name: Create Release Pull Request or Publish to npm
@@ -31,6 +37,6 @@ jobs:
         with:
           commit: "chore: release"
           publish: pnpm release
-          oidcAuth: true # Use OIDC with explicit env var passing (fixes proto shim compatibility)
+          oidcAuth: true # Test OIDC without proto shims
         env:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}