fix(ci): use Node npm that supports trusted publishing

Author: piotrski

.github/workflows/release.yml

@@ -24,10 +24,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: '22'
-
-      - name: Update npm for OIDC trusted publishing
-        run: npm install -g npm@latest
+          node-version: '24.7.0'
 
       - name: Install dependencies
         run: bun install
@@ -58,9 +55,12 @@ jobs:
           createGithubReleases: true
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
 
       - name: Publish canary snapshot
         if: steps.changesets.outputs.published != 'true'
+        env:
+          NPM_CONFIG_PROVENANCE: true
         run: |
           git checkout ${{ github.sha }}
           bun install