fix: pin Node 24 and npm 11 in publish workflow

[fqueis]

Description

Aligns the npm publish GitHub Actions workflow with trusted-publishing requirements by running on Node 24 and installing a fixed npm 11 major instead of floating latest. This keeps publish CI deterministic while meeting the Node and npm CLI versions needed for OIDC trusted publishing.

Key Changes & Features Implemented

CI / Publish Workflow

• Bump the publish job Node.js version from 22.14 to 24 (5dc43b4)
• Replace npm install -g npm@latest with npm install -g npm@11 so the trusted-publishing-capable CLI is pinned by major (5dc43b4)

How to Test

1. Review the diff in .github/workflows/publish.yml and confirm node-version: 24 and npm install -g npm@11.
2. On a branch or via workflow_dispatch, run the Publish workflow and verify the Setup Node.js and Ensure npm CLI steps succeed.
3. Confirm npm --version in the job logs reports npm 11.x and that subsequent lint/test/build/publish steps still run as expected when the package version is unpublished.