fix(ci): use npm trusted publishing provenance

Author: EvanSchleret

.github/workflows/release.yml

@@ -46,6 +46,9 @@ jobs:
     name: Publish to npm
     runs-on: ubuntu-latest
     needs: quality
+    permissions:
+      contents: read
+      id-token: write
 
     steps:
       - name: Checkout
@@ -82,4 +85,4 @@ jobs:
         run: bun run build
 
       - name: Publish package
-        run: npm publish --access public
+        run: npm publish --provenance --access public