ci: install npm 11 for trusted publisher OIDC support

Author: dwene

.github/workflows/publish.yml

@@ -19,6 +19,9 @@ jobs:
           node-version: "22"
           registry-url: "https://registry.npmjs.org"
 
+      - name: Install npm 11 (required for trusted publishers)
+        run: npm install -g npm@latest
+
       - name: Enable Corepack (Yarn 4)
         run: corepack enable