ci: pin node 22.14.0 and update npm for trusted publishing

Author: dialupdisaster

.github/workflows/release.yml

@@ -19,9 +19,12 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: "22"
+          node-version: "22.14.0"
           registry-url: "https://registry.npmjs.org"
 
+      - name: Update npm
+        run: npm install -g npm@latest
+
       - uses: oven-sh/setup-bun@v2
         with:
           bun-version: latest