ci: updates for OIDC NPM publishing

[rsdmike]

PR Checklist

• Unit Tests have been added for new changes
• API tests have been updated if applicable
• All commented code has been removed
• If you've added a dependency, you've ensured license is compatible with Apache 2.0 and clearly outlined the added dependency.

What are you changing?

Anything the reviewer should know when reviewing this PR?

If the there are associated PRs in other repositories, please link them here (i.e. device-management-toolkit/repo#365 )

[Copilot]

Pull request overview

This PR updates the CI workflows to use OIDC-based authentication for NPM publishing instead of the traditional token-based approach. The changes remove NODE_AUTH_TOKEN secret references, add id-token permissions, and update both Node.js and semantic-release versions.

Key changes:

• Adds id-token: write permission for OIDC authentication
• Updates Node.js version from 22.x to 24.x across both workflows
• Updates semantic-release from version 24.2.4 to 25.0.2
• Removes NODE_AUTH_TOKEN environment variable references

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
.github/workflows/release.yml	Adds OIDC permissions, updates Node.js and semantic-release versions, removes token-based authentication configuration
.github/workflows/node.js.yml	Updates Node.js version from 22.x to 24.x

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.