feat: add provenance for releases on npm (#461)

## PR Checklist

- [x] Addresses an existing open issue: fixes #462
- [x] That issue was marked as [`status: accepting
prs`](https://github.com/JoshuaKGoldberg/template-typescript-node-package/issues?q=is%3Aopen+is%3Aissue+label%3A%22status%3A+accepting+prs%22)
- [x] Steps in
[CONTRIBUTING.md](https://github.com/JoshuaKGoldberg/template-typescript-node-package/blob/main/.github/CONTRIBUTING.md)
were taken

## Overview

Adds support for provenance info on releases, see:
https://www.npmjs.com/package/@sdl-codegen/node


![image](https://github.com/JoshuaKGoldberg/template-typescript-node-package/assets/49038/f70eddc1-5296-4ff0-a1f6-8926bdeae5cb)

Author: orta

.github/workflows/release.yml

@@ -86,3 +86,4 @@ on:
 
 permissions:
   contents: write
+  id-token: write

.release-it.json

@@ -7,5 +7,8 @@
 		"autoGenerate": true,
 		"release": true,
 		"releaseName": "v${version}"
+	},
+	"npm": {
+		"publishArgs": ["--provenance"]
 	}
 }