chore: switch npm publish to trusted publishers (OIDC)

Drop NPM_TOKEN from the release workflow and publish via OIDC with Node 24.
Provenance is generated automatically by npm trusted publishing.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: MaatheusGois

.github/workflows/release.yml

@@ -81,7 +81,6 @@ jobs:
     needs: [ci, create-tag]
     if: always() && needs.ci.result == 'success' && (needs.create-tag.result == 'success' || needs.create-tag.result == 'skipped')
     runs-on: ubuntu-latest
-    environment: npm
     permissions:
       contents: read
       id-token: write
@@ -92,18 +91,17 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
           registry-url: https://registry.npmjs.org
+          package-manager-cache: false
 
       - run: npm ci
 
       - name: Build
         run: npm run build
 
       - name: Publish
-        run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --access public
 
   github-release:
     name: GitHub Release