ci: enable provenance statement generation

- express-rate-limit/express-rate-limit#406

Author: gamemaker1

.github/workflows/cicd.yml

@@ -108,6 +108,9 @@ jobs:
     runs-on: ubuntu-latest
     needs: [ci-node,ci-db-linting,ci-db-testing]
     if: startsWith(github.ref, 'refs/tags/v')
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - name: Checkout the repository
         uses: actions/checkout@v3
@@ -118,7 +121,7 @@ jobs:
       - name: Install dependencies
         run: npm ci
       - name: Publish package to NPM
-        run: npm publish --access=public
+        run: npm publish --provenance --access=public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Build package to upload to GitHub releases
@@ -131,4 +134,4 @@ jobs:
           files: acpr-rate-limit-postgresql.tgz
           body:
             You can view the changelog
-            [here](https://github.com/adrianprelipcean/express-rate-limit-postgresql/blob/master/changelog.md).
+            [here](https://github.com/adrianprelipcean/express-rate-limit-postgresql/blob/master/changelog.md).