use-trusted-publishing for provenance workflow

Author: jdalton

.github/workflows/provenance.yml

@@ -23,5 +23,4 @@ jobs:
       debug: ${{ inputs.debug }}
       package-name: '@socketregistry/packageurl-js'
       setup-script: 'pnpm run build'
-    secrets:
-      npm_token: ${{ secrets.NPM_TOKEN }}
+      use-trusted-publishing: true