Fix publish workflow by using setup-node bundled npm

Author: Copilot

.github/workflows/publish.yml

@@ -31,10 +31,6 @@ jobs:
           node-version: '24'
           registry-url: 'https://registry.npmjs.org'
 
-      # 确保使用最新版本的 npm 以支持 Trusted Publishing
-      - name: Update npm
-        run: npm install -g npm@latest
-
       - name: Install dependencies
         run: pnpm install
 
@@ -47,4 +43,4 @@ jobs:
       # 使用 OIDC Trusted Publishing 发布，无需 token
       # 在 npmjs.com 上配置 Trusted Publisher 后，npm 会自动使用 OIDC 认证
       - name: Publish to npm
-        run: npm publish --access public --provenance=false
+        run: npm publish --access public