chore: configure npm publish for OIDC trusted publisher

- Use Node 22 (latest LTS) for npm OIDC support
- Remove registry-url from setup-node
- Set NODE_AUTH_TOKEN to empty string for OIDC auth

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: Shadowfiend

.github/workflows/publish.yml

@@ -22,9 +22,8 @@ jobs:
     - name: Setup Node.js
       uses: actions/setup-node@v4
       with:
-        node-version: '18'
+        node-version: '24'
         cache: 'pnpm'
-        registry-url: 'https://registry.npmjs.org'
 
     - name: Install dependencies
       run: pnpm install
@@ -41,4 +40,4 @@ jobs:
     - name: Publish to npm
       run: npm publish --provenance --access public
       env:
-        NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        NODE_AUTH_TOKEN: ''