chore: Update NPM publishing to use OIDC

[Alexandre Asselin (alexasselin008)]

Jira issue link: SSD-3983

• Bump Node to 24
• Bump Pnpm to version 10.19
• Add pnpm settings to improve security: We force npm to wait 1 day after a package release before updating it. (except workleap packages)

minimumReleaseAge: 1440
minimumReleaseAgeExclude:
  - "@workleap*"

[Copilot]

Pull Request Overview

Updates the project's NPM publishing workflow to use OIDC-based authentication instead of token-based authentication, and upgrades Node.js and pnpm versions with enhanced security configurations.

• Updated Node.js version from LTS to 24.10 and pnpm to 10.19.0
• Configured pnpm to enforce a 1-day minimum release age for packages (excluding Workleap (@workleap) packages)
• Migrated from NPM_TOKEN to OIDC authentication for publishing

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File	Description
pnpm-workspace.yaml	Added security settings for minimum package release age with Workleap (@workleap) exception
package.json	Specified pnpm 10.19.0 as the package manager
.nvmrc	Updated Node version from LTS to 24.10
.github/workflows/changeset.yml	Removed NPM_TOKEN and updated comment to reflect OIDC usage

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}