Switched to OIDC trusted publishing for npm releases, replacing long-lived tokens with provenance attestation.
Full changelog
Changes
- Switch npm publish to trusted publishing via OIDC (no long-lived token, includes provenance attestation)
- Bump CI to Node 22 and npm latest
Same build fix as v2.1.3 (typescript ^5.7.2, @types/node ^20.19.39 for hono 4.9.7).