fix(npm): bump Node to 24 so npm 11+ resolves OIDC trusted publishing (#221)

npm 10.x (Node 22) ships an OIDC trusted-publishing implementation that
signs provenance attestations but does not fall through to OIDC for the
package PUT, resulting in 404s when no token auth is configured.
npm 11.6+ (Node 24) handles the flow correctly. Reference:
npm/cli#8730 (comment)

Author: tkrugg

.github/workflows/releases.yml

@@ -46,7 +46,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "22"
+          node-version: "24"
           registry-url: "https://registry.npmjs.org"
       - name: Publish npm packages
         env: