ci: align npm trusted publishing workflow

Author: s-JoL

.github/workflows/publish.yml

@@ -29,10 +29,18 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 24
           cache: pnpm
           registry-url: https://registry.npmjs.org
 
+      - name: Setup npm CLI for trusted publishing
+        run: npm install -g npm@11.5.1
+
+      - name: Show runtime versions
+        run: |
+          node --version
+          npm --version
+
       - name: Validate tag matches package version
         run: |
           PACKAGE_VERSION="$(node -p "require('./package.json').version")"
@@ -57,4 +65,4 @@ jobs:
         run: pnpm release:check
 
       - name: Publish
-        run: npm publish --provenance --access public
+        run: npm publish --access public