Move node release workflow to use trusted publishing

[acalcutt]

The tokens in the node workflow won't work anymore because npm has sunset the classic tokens.

https://github.blog/changelog/2025-12-09-npm-classic-tokens-revoked-session-based-auth-and-cli-token-management-now-available/

like used in https://github.com/mapbox/node-pre-gyp/blob/master/.github/workflows/release.yml#L91-L105
See migrations like:
maptiler/tileserver-gl#1872