Add setup-node step for npm registry auth

setup-node with registry-url configures the .npmrc with the OIDC
token needed for trusted publishing via bunx npm publish.

Co-authored-by: Ona <no-reply@ona.com>

.github/workflows/publish.yml

@@ -4,6 +4,10 @@ on:
   release:
     types: [published]
 
+permissions:
+  id-token: write  # Required for OIDC
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -15,6 +19,11 @@ jobs:
 
       - uses: oven-sh/setup-bun@v2
 
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+
       - run: bun install
 
       - run: bun run build