chore: Update GHA actions to Node.js 24 (#231)

* update gha to use node24

* add environment approval for PMG release

.github/workflows/publish-npm.yml

@@ -8,14 +8,15 @@ on:
 jobs:
   publish-npm:
     runs-on: ubuntu-latest
+    environment: npm-release
     permissions:
       contents: read
       id-token: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
         with:
           node-version: "24"
           registry-url: "https://registry.npmjs.org"
@@ -62,7 +63,7 @@ jobs:
         node-version: ["16", "18", "20"]
 
     steps:
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
         with:
           node-version: ${{ matrix.node-version }}