- Pin node-version to '24' instead of 'lts/*' for reproducible builds
- Remove 'environment: publish' gate to simplify workflow approval
- Remove NODE_AUTH_TOKEN env vars now that npm provenance handles auth

Co-Authored-By: Claude <noreply@anthropic.com>