feat: publish w/ provenance (#46)

Author: iBotPeaches

.github/workflows/publish.yml

@@ -2,6 +2,8 @@ name: Publish to NPM
 on:
   release:
     types: [published]
+permission:
+  id-token: write
 
 jobs:
   publish:
@@ -23,6 +25,6 @@ jobs:
         run: yarn install --network-concurrency 1
 
       - name: Publish (NPM)
-        run: npm publish --access public
+        run: npm publish --provenance --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}