chore: use Node 24 and lerna 9 for npm Trusted Publishers (#3502)

## Summary

The release pipeline was broken because the NPM_TOKEN expired — npm
classic tokens have been deprecated and capped to 90-day expiry.

This migrates to OIDC-based Trusted Publishers:

- Upgrade lerna from 8.x to 9.x (OIDC support requires lerna >= 9.0.0)
- Use Node 24 in release workflow (npm >= 11.5.1 required for OIDC,
ships with Node 24)

## Test plan

- [x] Prerelease pipeline published successfully with this change

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
* Updated Node.js version from 22 to 24 in CI workflow for improved
performance and latest runtime features.
* Upgraded lerna development dependency to latest version for enhanced
monorepo tooling support.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Author: JanCizmar

.github/workflows/release.yml

@@ -31,7 +31,7 @@ jobs:
       - name: Setup node
         uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           registry-url: 'https://registry.npmjs.org'
 
       - uses: pnpm/action-setup@v3

package.json

@@ -61,7 +61,7 @@
     "glob": "8.0.3",
     "husky": "^8.0.1",
     "jest": "^29.1.2",
-    "lerna": "^8.1.9",
+    "lerna": "^9.0.4",
     "npm-cli-login": "^1.0.0",
     "nunjucks": "3.2.3",
     "prettier": "^3.2.5",