🐛 drop registry-url for npm trusted publishing

setup-node's registry-url writes an .npmrc with always-auth=true
and _authToken=${NODE_AUTH_TOKEN}. With trusted publishing the env
is empty, so npm sends an empty token and gets a 404.

Author: cowboyd

.github/workflows/publish.yml

@@ -72,7 +72,6 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 24
-          registry-url: https://registry.npmjs.com
 
       - name: download build
         uses: actions/download-artifact@v4