fix: use node 24 trusted publishing

[jasonsuhari]

Summary

• use Node 24 in the release workflow so npm satisfies trusted-publishing requirements without installing npm@latest on Windows
• stop passing --provenance on the trusted-publishing/OIDC path, since npm automatically generates provenance for trusted publishing
• keep --provenance for the NPM_TOKEN fallback path

Closes #109.

Validation

• git diff --check
• inspected release workflow publish paths