fix npm trusted publishing: remove registry-url, upgrade npm for OIDC

actions/setup-node with registry-url writes .npmrc expecting
NODE_AUTH_TOKEN, which conflicts with OIDC trusted publishing.
Upgrade npm to latest (>=11.5.1) for OIDC support on Node 22.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: dickhardt

.github/workflows/release.yml

@@ -41,7 +41,7 @@ jobs:
         with:
           node-version: 22
           cache: 'npm'
-          registry-url: 'https://registry.npmjs.org'
+      - run: npm install -g npm@latest
       - run: npm ci
       - run: npm publish --provenance --access public