chore: prepare for trusted publishing (#76)

Allows token-less publishing.
See https://docs.npmjs.com/trusted-publishers

Author: chgeo

.github/workflows/release.yml

@@ -5,6 +5,7 @@ on:
 
 permissions:
   contents: write
+  id-token: write
 
 jobs:
   publish-npm:
@@ -14,7 +15,7 @@ jobs:
     - uses: actions/checkout@v4
     - uses: actions/setup-node@v4
       with:
-        node-version: 20
+        node-version: 24
         registry-url: https://registry.npmjs.org/
     - name: run tests
       run: |