chore: update node version for provenance and trusted publishing