ci: migrate to trusted publishing

[frantic1048]

Pull Request type

Please check the type of change your PR introduces:

• Bugfix
• Feature
• Code style update (formatting, renaming)
• Refactoring (no functional changes, no API changes)
• Build-related changes
• Documentation content changes
• Other (please describe):

What is the current behavior?

Publishing with access token, which will be expired soon. (See https://github.blog/changelog/2025-09-29-strengthening-npm-security-important-changes-to-authentication-and-token-management/ )

What is the new behavior?

Publishing with new trusted publishing method.

Does this introduce a breaking change?

• Yes
• No

Other information

• Upgraded Node.js to v24 to met minimal npm requirement(>=11.5.1) for trusted publising.
• Fixed missing HEAD_REF variable that causes npm command failing.