Use bunx npm publish for trusted publishing

bun publish does not pick up the OIDC token for npm trusted publishing.

Co-authored-by: Ona <no-reply@ona.com>

.github/workflows/publish.yml

@@ -4,10 +4,6 @@ on:
   release:
     types: [published]
 
-permissions:
-  id-token: write  # Required for OIDC
-  contents: read
-
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -19,11 +15,6 @@ jobs:
 
       - uses: oven-sh/setup-bun@v2
 
-      - uses: actions/setup-node@v4
-        with:
-          node-version: '24'
-          registry-url: 'https://registry.npmjs.org'
-
       - run: bun install
 
       - run: bun run build