ci: add registry-url and provenance to npm publish (#290)

Author: grant0417

.github/workflows/npm-publish.yml

@@ -5,6 +5,7 @@ on:
 
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   publish:
@@ -24,9 +25,11 @@ jobs:
         with:
           node-version-file: package.json
           cache: "pnpm"
+          registry-url: "https://registry.npmjs.org"
       - name: Install npm dependencies
         run: pnpm install --frozen-lockfile
       - run: pnpm build
-      - run: pnpm publish --recursive
+      - run: pnpm publish --recursive --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true