ci: use npm provenance for trusted publishing

Author: RapierCraft

.github/workflows/publish.yml

@@ -26,6 +26,6 @@ jobs:
         run: npm ci
 
       - name: Publish to npm
-        run: npm publish --access public
+        run: npm publish --access public --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}