fix: install latest npm for trusted publishing (#7)

* fix: remove registry-url from setup-node to enable npm trusted publishing

setup-node with registry-url creates .npmrc with an empty NODE_AUTH_TOKEN,
which prevents npm from using OIDC for authentication.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: install latest npm for trusted publishing OIDC support

Node 20's bundled npm is too old to support OIDC-based trusted
publishing. Installing npm@latest enables token-free publishing.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: ntatoud

.github/workflows/release.yml

@@ -29,6 +29,9 @@ jobs:
           node-version: 20
           cache: pnpm
 
+      - name: Install latest npm
+        run: npm install -g npm@latest
+
       - name: Install dependencies
         run: pnpm install