fix: restore npm OIDC publish on Node 24

[rharutyunyan]

Change Summary

What does this PR change?
Fixes publish-to-npm so a tag publish can use npm trusted publishing (OIDC) again. v2.0.6 already published to GitHub Packages; npm failed with E404 because actions/setup-node writes a dummy NODE_AUTH_TOKEN and npm then skips OIDC.

Related Issue/Ticket:
Follow-up to #28 / PT9-1372 release.

Testing & Verification

How was this tested?

• Unit tests
• Integration tests
• Manual testing (describe steps)
  • Compared with the failed Publish package run on v2.0.6
  • Matches current npm trusted-publishing docs (Node 24, no dummy token)
• Verified on staging

Risk Assessment

Risk Level:

• Low - Minor changes, no operational impact
• Medium - Moderate changes, limited impact, standard rollback available
• High - Significant changes, potential operational impact, complex rollback

Risks & Impact
CI-only. Does not change library source. After merge, the next tag (v2.0.7) should publish to npm.

Changes Made

• Use Node 24 for the npm job (ships npm ≥ 11.5.1).
• Unset NODE_AUTH_TOKEN and strip the _authToken line setup-node writes before npm publish --access public.