ci: fix publish workflow for npm trusted publishing

- Node 24 (npm v11 required for OIDC token exchange)
- Add registry-url for setup-node
- Add workflow_dispatch for manual trigger
- Remove redundant test step

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: icebob-ai

.github/workflows/publish.yml

@@ -3,6 +3,7 @@ name: Publish to NPM
 on:
   release:
     types: [published]
+  workflow_dispatch:
 
 permissions:
   id-token: write
@@ -15,22 +16,17 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - name: Use Node.js 22.x
+      - name: Use Node.js 24.x
         uses: actions/setup-node@v4
         with:
-          node-version: 22.x
-
-      - name: Update npm (OIDC support)
-        run: npm install -g npm@latest
+          node-version: 24.x
+          registry-url: https://registry.npmjs.org
 
       - name: Install dependencies
         run: npm ci
 
-      - name: Run tests
-        run: npm test
-
       - name: Build
         run: npm run build
 
       - name: Publish
-        run: npm publish --access public
+        run: npm publish --provenance --access public