fix: remove registry-url from setup-node to enable OIDC token exchange

The registry-url parameter causes setup-node to write an .npmrc with
an empty NODE_AUTH_TOKEN placeholder, which prevents npm from falling
back to OIDC-based trusted publishing.

Author: rchardx

.github/workflows/release.yml

@@ -45,7 +45,6 @@ jobs:
         with:
           node-version: 22
           cache: pnpm
-          registry-url: https://registry.npmjs.org
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
@@ -54,4 +53,4 @@ jobs:
         run: pnpm build
 
       - name: Publish to npm
-        run: npm publish --provenance
+        run: npm publish --provenance --access public