fix: upgrade to actions/checkout@v6 and setup-node@v6 for OIDC

v6 actions have proper OIDC support. v4 lacks it, causing
registry-url to write an invalid token to .npmrc.

 🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

Author: racerxdl

.github/workflows/publish.yml

@@ -9,17 +9,14 @@ permissions:
   id-token: write
   contents: read
 
-env:
-  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-
 jobs:
   publish:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: '24'
           registry-url: 'https://registry.npmjs.org'