DX-809 update to use preferred OIDC for npm publish in github actions

[lloyd-cio]

Note

Updates the publish workflow to use OIDC (with appropriate permissions), Node 20, and latest actions, removing the need for NPM token.

• CI/CD (.github/workflows/publish.yml):
  • OIDC enablement: Adds environment: release and permissions (id-token: write, contents: read); removes NODE_AUTH_TOKEN usage.
  • Runtime updates: Upgrades to actions/checkout@v4, actions/setup-node@v4, and node-version: 20.
  • NPM: Installs latest npm globally for OIDC support; continues publish with npm publish --access public.

^{Written by Cursor Bugbot for commit eda89c6. This will update automatically on new commits. Configure here.}