ci(publish): generate provenance attestation

Signed-off-by: CrazyMax <[email protected]>

Author: crazy-max

.github/workflows/publish.yml

@@ -49,4 +49,4 @@ jobs:
         name: Publish
         run: |
           npm version --no-git-tag-version ${GITHUB_REF#refs/tags/v}
-          npm publish --access public
+          npm publish --provenance --access public