Upgraded publish workflow to Node 24 for npm 11.x OIDC publish support

Node 22 ships with npm 10.9.2, which signs provenance via OIDC but
can't authenticate the publish PUT through Trusted Publisher. Node 24
ships with npm 11.x, which supports OIDC publish end-to-end. In-place
npm upgrade (npm i -g npm@latest) hits MODULE_NOT_FOUND on
promise-retry mid-upgrade, so the cleaner fix is to use Node 24 from
the start. Matches the project's @types/node@^24 target as well.

Author: Eric Lee

.github/workflows/publish.yml

@@ -21,12 +21,10 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: '22'
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org'
           cache: 'npm'
 
-      - run: npm install -g npm@latest
-
       - run: npm ci
 
       - run: npm run build