ci: install npm 11+ for trusted publishing (#28)

Trusted publishing requires npm CLI 11.5.1+, but Node 22.x
bundles npm 10.x. This adds a step to install the latest npm
before publishing.

Fixes ENG-1912

Author: init4samwise

.github/workflows/release.yml

@@ -32,6 +32,9 @@ jobs:
       - run: pnpm install --frozen-lockfile
       - run: pnpm build
 
+      - name: Install npm 11+ for trusted publishing
+        run: npm install -g npm@latest
+
       - name: Create Release (if needed)
         # Uses OIDC trusted publishing - no NPM_TOKEN needed
         # See: https://docs.npmjs.com/trusted-publishers