chore: retain provenance while adding npm auth token

Co-authored-by: leecalcote <7570704+leecalcote@users.noreply.github.com>

Author: Copilot

.github/workflows/publish-package.yml

@@ -69,7 +69,7 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
           set -e
-          npm publish --access public --verbose
+          npm publish --provenance --access public --verbose
 
       - name: Pull changes from remote
         run: git pull origin master
@@ -84,4 +84,3 @@ jobs:
           commit_author: ${{ github.actor }} <${{ github.actor }}@users.noreply.github.com>
           token: ${{ secrets.GH_ACCESS_TOKEN }}
 
-