Fix npm OIDC trusted publishing and upgrade Node to v25 (#223)

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: wrn14897

.github/workflows/release.yaml

@@ -2,6 +2,7 @@ name: Release
 on:
   push:
     branches: [main]
+  workflow_dispatch:
 permissions:
   contents: write
   pull-requests: write
@@ -17,11 +18,14 @@ jobs:
         with:
           node-version-file: ".nvmrc"
           cache: "yarn"
-          registry-url: "https://registry.npmjs.org"
+          # Note: Do NOT set registry-url here — it creates a NODE_AUTH_TOKEN
+          # that conflicts with npm OIDC trusted publishing
       - name: Setup Deno
         uses: denoland/setup-deno@v2
         with:
           deno-version: v2.x
+      - name: Configure npm registry
+        run: npm config set registry https://registry.npmjs.org/
       - name: Install dependencies
         run: yarn
       - name: Create Release Pull Request or Publish

.nvmrc

@@ -1 +1 @@
-v18.20.2
+v25