ci: update release workflow to adopt OIDC

Author: kateinoigakukun

.github/workflows/build.yml

@@ -166,6 +166,9 @@ jobs:
     needs: [rake-tasks]
     runs-on: ubuntu-24.04
     if: ${{ startsWith(github.ref, 'refs/tags/') || inputs.publish }}
+    permissions:
+      id-token: write # Required for OIDC
+      contents: read
     steps:
       - uses: actions/checkout@v4
       - uses: actions/download-artifact@v4
@@ -176,7 +179,7 @@ jobs:
           path: release
       - uses: actions/setup-node@v4
         with:
-          node-version: 16
+          node-version: 24
           registry-url: https://registry.npmjs.org/
       - uses: ruby/setup-ruby@v1
         with:
@@ -187,4 +190,3 @@ jobs:
       - run: bundle exec rake "ci:publish[${PREREL_NAME:-$GITHUB_REF_NAME}]"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}