🐛 Fix trusted publishing npm CLI

Ensure semantic-release child npm publish uses npm 11 so OIDC publishing completes.

Author: AnandChowdhary

.github/licensed.yml

@@ -25,3 +25,7 @@ reviewed:
     - sprintf-js
     - string_decoder
     - argparse
+    - safe-buffer
+    - tr46
+    - webidl-conversions
+    - whatwg-url

.github/workflows/release.yml

@@ -52,5 +52,9 @@ jobs:
           GIT_COMMITTER_NAME: "Koj Bot"
           GIT_COMMITTER_EMAIL: "bot@koj.co"
         run: |
-          npx npm@latest --version
-          npx npm@latest exec -- semantic-release
+          NPM_EXE=$(npx npm@latest exec -- node -p "process.env.npm_execpath")
+          NPM_PACKAGE_DIR=$(dirname "$(dirname "$NPM_EXE")")
+          NPM_BIN_DIR=$(dirname "$NPM_PACKAGE_DIR")/.bin
+          export PATH="$NPM_BIN_DIR:$PATH"
+          npm --version
+          ./node_modules/.bin/semantic-release