fix(ci): pin npm@11 in publish workflow, file issue on publish failure (#4265)

npm install -g npm@latest now installs npm 12, which requires node >= 22.22.2
while .nvmrc pins 22.16.0 (EBADENGINE) - this silently broke the v10.3.3 and
v10.3.4 npm publishes. Pin npm@11 (supports node >=22.9.0, has OIDC since
11.5.1) and add a job that opens an issue when the publish job fails.