fix: use npm trust publish (#9)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
  * Expanded CI to test against Node.js 24 for broader compatibility.
* Switched release pipeline to an npm-based workflow to streamline
publishing.
  * Updated workflow permissions to enable necessary write operations.
  * Removed an unused NPM token from secrets; retained the Git token.
  * No user-facing changes.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Author: fengmk2

.github/workflows/nodejs.yml

@@ -12,6 +12,6 @@ jobs:
     uses: node-modules/github-actions/.github/workflows/node-test.yml@master
     with:
       os: 'ubuntu-latest, macos-latest, windows-latest'
-      version: '16, 18.19.0, 18, 20, 22'
+      version: '16, 18.19.0, 18, 20, 22, 24'
     secrets:
       CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/release.yml

@@ -3,10 +3,16 @@ on:
   push:
     branches: [ master ]
 
+permissions:
+  contents: write
+  deployments: write
+  issues: write
+  pull-requests: write
+  id-token: write
+
 jobs:
   release:
-    name: Node.js
-    uses: node-modules/github-actions/.github/workflows/node-release.yml@master
+    name: NPM Release
+    uses: node-modules/github-actions/.github/workflows/npm-release.yml@master
     secrets:
-      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       GIT_TOKEN: ${{ secrets.GIT_TOKEN }}