chore: set provenance npm config flag

.github/workflows/publish.yml

@@ -148,6 +148,8 @@ jobs:
     name: Publish to NPM
     if: "${{ contains(github.event.head_commit.message, 'chore(release): publish') == false }}"
     runs-on: ubuntu-latest
+    env:
+      NPM_CONFIG_PROVENANCE: true
     steps:
       - name: Checkout code
         uses: actions/checkout@v3