chore: [SVLS-8378] migrate to trusted publishing

[ava-silver]

What does this PR do?

Adds the proper permissions to the publish workflow to support trusted publishing

Also upgrades Node.js and yarn versions across GitHub workflows to use Node 24 and Yarn 4.10.3 where appropriate and add Node 24 to the test matrix.

Also, I noticed that CI is running tests twice per commit, based on how we have triggers set up, so I've safely deduplicated that.

Motivation

https://datadoghq.atlassian.net/browse/SVLS-8378

Testing Guidelines

Verified that all workflows run successfully with the updated Node.js versions.

Types of changes

• Bug fix
• New feature
• Breaking change
• Misc (docs, refactoring, dependency upgrade, etc.)

Check all that apply

• This PR's description is comprehensive
• This PR contains breaking changes that are documented in the description
• This PR introduces new APIs or parameters that are documented and unlikely to change in the foreseeable future
• This PR impacts documentation, and it has been updated (or a ticket has been logged)
• This PR's changes are covered by the automated tests
• This PR collects user input/sensitive content into Datadog

[ava-silver]

• chore: [SVLS-8378] migrate to trusted publishing #657 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.