Improve GitHub Actions with setup-java v5.5.0 security and Maven enhancements

[renanfranca]

Goal

Update the Java setup configuration in the following workflows:

• .github/workflows/github-actions.yml
• .github/workflows/release.yml

Use the relevant security and Maven improvements available in actions/setup-java v5.5.0.

Changes

Update the Java setup step to:

- name: 'Setup: Java'
  uses: actions/setup-java@v5
  with:
    distribution: 'temurin'
    java-version: 25
    cache: 'maven'
    verify-signature: true
    show-download-progress: false

The "verify-signature" option must be enabled to verify the cryptographic signature of the downloaded Temurin JDK before it is used by the build.

The "show-download-progress" option must remain disabled to keep Maven logs cleaner. Since "setup-java" automatically adds "-ntp" through "MAVEN_ARGS", remove the redundant "-ntp" argument from Maven commands.

For example, replace:

./mvnw --batch-mode -ntp clean verify

with:

./mvnw --batch-mode clean verify

Apply the same change to all Maven commands in the build and release workflows.

Acceptance criteria

• JDK signature verification is enabled in both workflows.
• Maven download progress is explicitly disabled.
• Redundant "-ntp" arguments are removed.
• Maven caching continues to work.
• Pull request builds continue to pass.
• Tag-based releases continue to publish the npm package and GitHub release successfully.