ci: use npm 11 for trusted publishing

Author: Dmatut7

.github/workflows/publish.yml

@@ -25,7 +25,9 @@ jobs:
           registry-url: https://registry.npmjs.org
 
       - name: Install
-        run: npm ci
+        run: |
+          npm install -g npm@^11.10.0
+          npm ci
 
       - name: Verify tag matches package version
         run: |

tests/cli.test.ts

@@ -76,6 +76,7 @@ describe("codex-flow cli", () => {
 
     assert.match(workflow, /on:\s*\n\s+push:\s*\n\s+tags:\s*\n\s+- ['"]v\*['"]/);
     assert.match(workflow, /id-token:\s*write/);
+    assert.match(workflow, /npm install -g npm@\^11\.10\.0/);
     assert.match(workflow, /npm publish --access public/);
     assert.doesNotMatch(workflow, /NODE_AUTH_TOKEN|NPM_TOKEN|_authToken/);
   });