chore: add --provenance flag to the npm publish command

[nissy-dev]

Summary

I added the --provenance flag to publish provenance data alongside the package.

Starting today, when you build your npm projects on GitHub Actions, you can publish provenance alongside your package by including the --provenance flag. This provenance data gives consumers a verifiable way to link a package back to its source repository and the specific build instructions used to publish it (see example on npmjs.com).

see: Introducing npm package provenance

Test Plan