fix(ISSUE-16): remove registry-url from setup-node for OIDC auth

[cuzfrog]

Removes registry-url from actions/setup-node@v4 in the publish workflow. This prevents setup-node from creating a /tmp/.npmrc with _authToken=${NODE_AUTH_TOKEN}, which interferes with npm publish --provenance OIDC auth.

The registry-url is unnecessary — npm ci uses the default npmjs.org registry, and npm publish --provenance uses OIDC token exchange via the id-token: write permission.