Add provenance statment to NPM packages (#13318)

Co-authored-by: Sam Rose <[email protected]>

Author: alex-page

.changeset/brown-ligers-drive.md

@@ -0,0 +1,11 @@
+---
+'polaris-for-vscode': patch
+'@shopify/polaris-icons': patch
+'@shopify/polaris-migrator': patch
+'@shopify/polaris': patch
+'@shopify/polaris-tokens': patch
+'polaris.shopify.com-get-props': patch
+'@shopify/stylelint-polaris': patch
+---
+
+Add provenance statement

.github/workflows/release.yml

@@ -11,6 +11,10 @@ jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      id-token: write
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v3
@@ -50,3 +54,4 @@ jobs:
         env:
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.SHOPIFY_GH_ACCESS_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true