fix: remove registry-url from setup-node to fix OIDC publishing

setup-node with registry-url writes an .npmrc expecting NODE_AUTH_TOKEN,
which sends an empty/invalid token that overrides OIDC trusted publishing.
Set registry manually before publish instead.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: phernandez

.github/workflows/release.yml

@@ -34,7 +34,6 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: "20"
-          registry-url: "https://registry.npmjs.org"
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -76,7 +75,9 @@ jobs:
           git push origin "${{ steps.bump.outputs.tag }}"
 
       - name: Publish to npm
-        run: npm publish --provenance --access public
+        run: |
+          npm config set registry https://registry.npmjs.org/
+          npm publish --provenance --access public
 
       - name: Create GitHub release
         uses: softprops/action-gh-release@v2