ci: pin Node 22.22.1 and restore npm@latest in publish workflow

Node 22.22.2 has a regression (nodejs/node#62425) that breaks
npm install -g npm@latest due to missing promise-retry module.
Pin to 22.22.1 to work around the issue.

Restore npm@latest install since OIDC trusted publishing requires
npm >= 11.5.1, which is newer than the bundled version.

Author: libraz

.github/workflows/publish.yml

@@ -18,9 +18,10 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: '22'
+          node-version: '22.22.1'
           registry-url: 'https://registry.npmjs.org'
 
+      - run: npm install -g npm@latest
       - run: corepack enable
       - run: corepack prepare yarn@4.12.0 --activate