Release: fix: wire up Node 24 + setup-node for npm trusted publishing (#845)

The previous commit removed .npmrc files and NPM_TOKEN expecting
OIDC-based passwordless auth, but npm trusted publishing requires
Node >=22.14.0, npm >=11.5.1, and actions/setup-node to configure
the registry. Without setup-node the runner had no registry config
at all, causing ENEEDAUTH on every npm publish attempt.

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: mbevc1

docs.kosli.com/assets/metadata.json

@@ -1 +1 @@
-{"currentversion": "v2.17.3"}
+{"currentversion": "v2.17.4"}

docs.kosli.com/content/legacy_ref/v2.15.3/_index.md

@@ -1,7 +1,7 @@
 ---
 title: v2.16.0
 bookCollapseSection: true
-weight: 603
+weight: 604
 ---
 
 # v2.16.0

docs.kosli.com/content/legacy_ref/v2.16.0/_index.md

@@ -1,7 +1,7 @@
 ---
 title: v2.17.0
 bookCollapseSection: true
-weight: 602
+weight: 603
 ---
 
 # v2.17.0

docs.kosli.com/content/legacy_ref/v2.17.0/_index.md

@@ -1,7 +1,7 @@
 ---
 title: v2.17.1
 bookCollapseSection: true
-weight: 601
+weight: 602
 ---
 
 # v2.17.1

docs.kosli.com/content/legacy_ref/v2.17.1/_index.md

@@ -1,7 +1,7 @@
 ---
 title: v2.17.2
 bookCollapseSection: true
-weight: 600
+weight: 601
 ---
 
 # v2.17.2

docs.kosli.com/content/legacy_ref/v2.17.2/_index.md

@@ -0,0 +1,7 @@
+---
+title: v2.17.3
+bookCollapseSection: true
+weight: 600
+---
+
+# v2.17.3

docs.kosli.com/content/legacy_ref/v2.17.3/_index.md

@@ -15,12 +15,18 @@ kosli allow artifact [IMAGE-NAME | FILE-PATH | DIR-PATH] [flags]
 
 Add an artifact to an environment's allowlist.  
 
-The artifact fingerprint can be provided directly with the `--fingerprint` flag, or 
+The artifact fingerprint can be provided directly with the `--fingerprint` flag, or
 calculated based on `--artifact-type` flag.
 
 Artifact type can be one of: "file" for files, "dir" for directories, "oci" for container
 images in registries or "docker" for local docker images.
 
+Note: `--artifact-type=docker` reads the image's repo digest via the local Docker daemon.
+The image must have been pushed to or pulled from a registry for a repo digest to exist;
+a freshly built image (just `docker build`) will not have one. If the image is already in
+a registry, prefer `--artifact-type=oci`, which fetches the digest directly from the
+registry without needing a local Docker daemon.
+
 
 
 ## Flags