chore: update release to trusted publishing

.github/workflows/release.yml

@@ -1,21 +1,25 @@
 name: Publish NPM Package
 
 on:
-    push:
-        tags:
-            - "*"
+  push:
+    tags:
+      - "*"
+
+permissions:
+  id-token: write
+  contents: read
 
 jobs:
-    publish-to-npm:
-        runs-on: ubuntu-latest
-        steps:
-            - uses: actions/checkout@v5
-            - uses: actions/setup-node@v5
-              with:
-                  node-version-file: .nvmrc
-            - name: Publish package
-              run: |
-                  yarn install --immutable
-                  yarn npm publish
-              env:
-                  NPM_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
+  publish-to-npm:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 24
+          registry-url: "https://registry.npmjs.org"
+
+      - name: Install dependencies
+        run: yarn install --immutable
+      - name: Publish package
+        run: npm publish