Use yarn npm publish with OIDC for trusted publishing

- Upgrade to Yarn 4.12.0 for OIDC support (PR yarnpkg/berry#6898)
- Replace npx npm@latest publish --provenance with yarn npm publish
- Provenance is automatic with OIDC trusted publishing
- Add packageManager field where missing

Author: hillna

.github/workflows/ci.yml

@@ -21,7 +21,7 @@ jobs:
       - run: corepack enable
       - uses: actions/setup-node@v6
         with:
-          node-version: 22.x
+          node-version: 16.x
           cache: yarn
           registry-url: https://registry.npmjs.org
 
@@ -31,4 +31,4 @@ jobs:
       - run: yarn pack
       - name: Publish to NPM
         if: ${{ startsWith(github.ref, 'refs/tags/v') }}
-        run: npx npm@latest publish package.tgz --provenance --access public
+        run: yarn npm publish package.tgz --access public --provenance

package.json

@@ -66,5 +66,6 @@
   "author": {
     "name": "Foxglove Technologies",
     "email": "support@foxglove.dev"
-  }
+  },
+  "packageManager": "yarn@4.12.0"
 }