fix: configure npm registry and auth for OIDC provenance publishing

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: nam-hle

.github/actions/setup/action.yml

@@ -19,6 +19,7 @@ runs:
       with:
         node-version: ${{ inputs.node-version }}
         cache: pnpm
+        registry-url: https://registry.npmjs.org
 
     - name: Install dependencies
       run: pnpm install

.github/workflows/release.yml

@@ -38,6 +38,8 @@ jobs:
       - name: Publish to npm
         if: ${{ !startsWith(github.ref_name, 'vscode-extension/') }}
         run: pnpm --filter "./packages/${{ steps.parse-tag.outputs.package }}" publish --no-git-checks --provenance
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Publish VS Code Extension
         if: startsWith(github.ref_name, 'vscode-extension/')