Add --provenance

Author: cmdcolin

.github/workflows/publish.yml

@@ -24,4 +24,4 @@ jobs:
           registry-url: 'https://registry.npmjs.org'
       - run: pnpm install --frozen-lockfile
       - run: pnpm build
-      - run: npm publish --access public
+      - run: npm publish --access public --provenance

DEVELOPERS.md

@@ -0,0 +1,7 @@
+## Publishing
+
+just push a new tag using e.g.
+
+```
+pnpm version minor
+```