add --provenance to npm publish for

See https://github.blog/2023-04-19-introducing-npm-package-provenance/

.github/workflows/ci.yaml

@@ -62,7 +62,7 @@ jobs:
       - name: Install dependencies
         run: npm ci
       - name: Publish to npm
-        run: npm publish
+        run: npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Build package to upload to GitHub releases