Use yarn npm publish with OIDC for trusted publishing

- Upgrade to Yarn 4.12.0 for OIDC support (PR yarnpkg/berry#6898)
- Replace npx npm@latest publish --provenance with yarn npm publish
- Provenance is automatic with OIDC trusted publishing
- Add packageManager field where missing

Author: hillna

.github/workflows/ci.yml

@@ -32,4 +32,4 @@ jobs:
       - run: yarn pack
       - name: Publish to NPM
         if: ${{ startsWith(github.ref, 'refs/tags/v') }}
-        run: npx npm@latest publish package.tgz --provenance --access public
+        run: yarn npm publish package.tgz --access public --provenance

.yarn/install-state.gz

@@ -0,0 +1 @@
+nodeLinker: node-modules

.yarnrc.yml

@@ -4,6 +4,7 @@
   "version": "1.3.1",
   "description": "Isomorphic ponyfill wrapping native browser fetch and node-fetch",
   "license": "MIT",
+  "packageManager": "yarn@4.12.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/foxglove/just-fetch.git"