fix(ci): add back setup-node step for npm OIDC auth in publish workflow