ci: enable npm provenance

Author: phukon

.github/workflows/release.yml

@@ -10,6 +10,7 @@ permissions:
   contents: write
   issues: write
   pull-requests: write
+  id-token: write
 
 jobs:
   release:
@@ -29,4 +30,5 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
         run: npx semantic-release

package.json

@@ -48,5 +48,8 @@
     "semantic-release": "^24.2.1",
     "tsup": "^8.0.2",
     "typescript": "^5.4.3"
+  },
+  "publishConfig": {
+    "provenance": true
   }
 }