Remove deprecated Node.js 20 publishing actions

Use actions/checkout@v7 and actions/setup-python@v7, which run on Node.js 24.
Invoke the official Comfy CLI directly because the upstream publishing
composite still embeds older setup actions.

Preserve the existing publish triggers, Python version, registry secret,
package version and read-only repository permissions. Pass the registry
token through a quoted environment variable.

Validation: actionlint and shell syntax checks pass; publish triggers and
secret references match the previous workflow. No registry publication is
triggered by this workflow-only change.

.github/workflows/publish.yml

@@ -17,10 +17,20 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
+
+      # Run the CLI directly; the upstream publishing action still uses Node.js 20 actions.
+      - name: Set up Python
+        uses: actions/setup-python@v7
+        with:
+          python-version: "3.10"
+
+      - name: Install Comfy CLI
+        run: python -m pip install comfy-cli
 
       - name: Publish to Comfy Registry
-        uses: Comfy-Org/publish-node-action@main
-        with:
-          personal_access_token: ${{ secrets.REGISTRY_ACCESS_TOKEN }}
-          skip_checkout: "true"
+        env:
+          REGISTRY_ACCESS_TOKEN: ${{ secrets.REGISTRY_ACCESS_TOKEN }}
+        run: |
+          comfy --skip-prompt --no-enable-telemetry env
+          comfy node publish --token "$REGISTRY_ACCESS_TOKEN"