ci: enable provenance statement generation

- express-rate-limit/express-rate-limit#406

Author: gamemaker1

.github/workflows/ci.yaml

@@ -47,6 +47,8 @@ jobs:
     needs: [lint, test-library]
     if: startsWith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: Checkout the repository
         uses: actions/checkout@v3
@@ -57,7 +59,7 @@ jobs:
       - name: Install dependencies
         run: npm ci
       - name: Publish package to NPM
-        run: npm publish
+        run: npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Build package to upload to GitHub releases