chore: switch npm publish to trusted publishers via OIDC (#38)

* chore: fix trusted publishers workflow — use Node 22 and npm publish

Node >= 22.14.0 (npm >= 11.5.1) is required for trusted publisher OIDC
auth. Provenance is generated automatically, no flag needed.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore: update publish workflow to match npm trusted publishers docs

Use actions/checkout@v6, actions/setup-node@v6, and Node 24 as
recommended by npm trusted publishers documentation.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: Prashant-Surya

.github/workflows/publish-node-sdk.yml

@@ -13,13 +13,13 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org'
-          node-version: '20'
 
       - name: Enable corepack
         run: corepack enable pnpm
@@ -31,7 +31,7 @@ jobs:
         run: pnpm build
 
       - name: Publish to npm
-        run: pnpm publish --access public --provenance
+        run: npm publish --access public
 
       - name: Get version from package.json
         id: package-version