ci(publish): use npm trusted publishers with OIDC (#103)

## Summary
- Add OIDC permissions (`id-token: write`) for npm trusted publishers
- Update Node.js to version 24
- Remove `registry-url` from setup-node (was setting NODE_AUTH_TOKEN
which interferes with OIDC)
- Bump version to 0.1.3
- Fix `repository.url` in package.json

<!-- Reviewable:start -->
- - -
This change is [<img src="https://reviewable.io/review_button.svg"
height="34" align="absmiddle"
alt="Reviewable"/>](https://reviewable.io/reviews/m-lab/ndt7-js/103)
<!-- Reviewable:end -->

Author: robertodauria

.github/workflows/publish.yml

@@ -17,7 +17,6 @@ jobs:
       - uses: actions/setup-node@v6
         with:
           node-version: '24'
-          registry-url: 'https://registry.npmjs.org'
       - run: npm ci
       - run: npm run build --if-present
       - run: npm test