Rename includesOnly to hasOnly, bump version, and update publish workflows (Node 26 + pinned npm)

[rustpls]

Motivation

• Update CI publishing workflows to use Node.js 26 and avoid an npm@latest provenance regression that breaks sigstore by pinning the CLI.
• Bump package version for the next release.
• Clarify and tighten a collection utility by renaming includesOnly to hasOnly with a clearer list-focused signature and examples.

Description

• Updated .github/workflows/publish_jsr.yml to install Node.js via actions/setup-node@v4 with node-version: 26 before running npx jsr publish.
• Updated .github/workflows/publish_npm.yml to use actions/setup-node@v4 with node-version: 26, pinned the npm CLI to 11.4.2 to avoid the provenance regression, and added a npm --version verification step.
• Bumped deno.json package version from 2.2.0 to 2.3.0.
• Renamed the utility includesOnly to hasOnly in src/core.ts, changed the parameter from Iterable<T> to T[], updated JSDoc and examples, and adjusted implementation accordingly.
• Updated tests in src/core_test.ts to import hasOnly and added positive and negative unit tests covering the new function behavior.

Testing

• Ran unit tests with deno test, and all tests passed.
• The updated GitHub Actions workflow steps were added to the repo to be exercised by CI on tag pushes (no additional workflow run output included here).

---

Codex Task