ci(publish): use npm trusted publishers with OIDC (#101)

## Summary
- Add OIDC permissions (`id-token: write`) for npm trusted publishers
- Update Node.js to version 24 (ships with npm 11.x for trusted
publishing support)
- Remove `NODE_AUTH_TOKEN` secret (no longer needed with trusted
publishing)
- Bump version to 0.1.3
- Fix `repository.url` in package.json to include `https://` prefix

<!-- Reviewable:start -->
- - -
This change is [<img src="https://reviewable.io/review_button.svg"
height="34" align="absmiddle"
alt="Reviewable"/>](https://reviewable.io/reviews/m-lab/ndt7-js/101)
<!-- Reviewable:end -->

Author: robertodauria

.github/workflows/publish.yml

@@ -19,7 +19,7 @@ jobs:
     - name: Setup Node.js
       uses: actions/setup-node@v6
       with:
-        node-version: 22
+        node-version: 24
         cache: 'npm'
         registry-url: 'https://registry.npmjs.org'