Add npm trusted publishing, update to Node 24, remove deprecated sourcemaps plugin

- Configure publish workflow to use OIDC trusted publishing (no NPM_TOKEN)
- Update Node to v24 in both CI workflows
- Add engines field to package.json pinning Node 24
- Remove deprecated rollup-plugin-sourcemaps

Author: tylerccarson

.github/workflows/main.yml

@@ -12,9 +12,9 @@ jobs:
       - uses: actions/checkout@v3
 
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '24'
 
       - name: Lib - Install
         run: npm i

.github/workflows/publish.npm.yml

@@ -2,6 +2,10 @@ name: Publish to NPM
 on:
   workflow_dispatch:
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   publish-npm:
     environment: prod
@@ -13,18 +17,16 @@ jobs:
 
     steps:
       - name: Get the source code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
-      - name: Retrieve secrets from KSM
-        id: ksmsecrets
-        uses: Keeper-Security/ksm-action@master
+      - name: Setup Node
+        uses: actions/setup-node@v4
         with:
-          keeper-secret-config: ${{ secrets.KSM_CONFIG }}
-          secrets: |
-            NScQiZwrHJFCPv1gL8TX6Q/field/password > env:NPM_TOKEN
+          node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
 
       - name: Install dependencies
         run: npm install
 
       - name: Publish package
-        run: npm publish
+        run: npm publish