Update release workflow to use npm trusted publishing

[austnwil]

Description of changes:

NPM is making changes to authentication that necessitate migrating the publishing workflow to trusted publishing over using NPM tokens. This updates the workflow to use trusted publishing, getting ahead of the change.

See below:

• https://github.blog/changelog/2025-09-29-strengthening-npm-security-important-changes-to-authentication-and-token-management/
• https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[austnwil]

Note on node version:

• Current workflow version uses node 16, which is end of life. Trusted publishing requires npm CLI version 11.5.1, which is not supported on node 16.
• Current LTS version of node is 22, but 24 enters LTS on October 28, while 22 enters maintenance on October 21, so I updated the node version to 24.
• actions/setup-node needs updated to v4 since v3 is based on node 16.

CLI version 11.5.1 or higher should come installed with node 24.

[nirosys]

Looks good!