ci: update node version, use provenance

Author: oetr

.github/workflows/release.yaml

@@ -90,7 +90,7 @@ jobs:
       - name: node
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           cache: "npm"
       - name: install
         run: npm ci
@@ -103,7 +103,7 @@ jobs:
           path: packages/fuzzer/prebuilds
           merge-multiple: true
       - name: publish
-        run: npm publish --workspaces --access public
+        run: npm publish --workspaces --provenance
       # create GitHub release
       - name: read version
         id: read-version