ci: use bun ci and npm publish in release workflow (#16)

Use 'bun ci' instead of 'bun install' for faster, lockfile-based
dependency installation in CI environments.

Use 'npm publish' directly instead of 'bunx npm publish' to ensure
proper support for provenance in npm publishing.