ci(publish): use npm trusted publishers with OIDC (#100)

## Summary
- Add OIDC permissions (`id-token: write`) for npm trusted publishers
- Update Node.js to version 22
- Remove `NODE_AUTH_TOKEN` secret (no longer needed with trusted
publishing)
- Bump version to 0.1.3
- Fix `repository.url` in package.json to include `https://` prefix

<!-- Reviewable:start -->
- - -
This change is [<img src="https://reviewable.io/review_button.svg"
height="34" align="absmiddle"
alt="Reviewable"/>](https://reviewable.io/reviews/m-lab/ndt7-js/100)
<!-- Reviewable:end -->

Author: robertodauria

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m-lab/ndt7",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "description": "NDT7 client for measuring networks",
   "main": "src/ndt7.js",
   "scripts": {
@@ -13,7 +13,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "github.com/m-lab/ndt7-js"
+    "url": "https://github.com/m-lab/ndt7-js"
   },
   "keywords": [
     "network",

src/ndt7.js

@@ -17,7 +17,7 @@
   const ndt7 = (function() {
     const staticMetadata = {
       'client_library_name': 'ndt7-js',
-      'client_library_version': '0.1.0',
+      'client_library_version': '0.1.3',
     };
     // cb creates a default-empty callback function, allowing library users to
     // only need to specify callback functions for the events they care about.