chore: add --provenance to allow trusted publishing to npm

Author: boazpoolman

.github/workflows/publish.yml

@@ -46,7 +46,7 @@ jobs:
       - name: Set package version
         run: yarn version --new-version "${{ steps.get_version.outputs.VERSION }}" --no-git-tag-version
       - name: Publish package
-        run: npm publish --access public --tag ${{ steps.extract_tag.outputs.NPM_TAG }}
+        run: npm publish --provenance --access public --tag ${{ steps.extract_tag.outputs.NPM_TAG }}
       - name: Push version bump
         uses: stefanzweifel/git-auto-commit-action@v4
         with: