feat(cd): switch to npm trusted publishers

Replace NPM_TOKEN with OIDC-based trusted publishing. Bump Node to
24 LTS (bundles npm 11 which supports OIDC). Add @videojs/store and
@videojs/element to release-please config.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.github/workflows/ci.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v5
         with:
-          node-version: 22
+          node-version-file: '.nvmrc'
           cache: pnpm
 
       - name: Install dependencies