ci(npm): add provenance configuration (#1289)

Co-authored-by: philibeaux <[email protected]>

Author: matthprost

.github/workflows/release.yml

@@ -10,6 +10,7 @@ jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
+    permissions: write-all
     steps:
       - uses: actions/[email protected]
       - name: Git Identity
@@ -18,7 +19,7 @@ jobs:
           git config --global user.email '[email protected]'
           git remote set-url origin https://x-access-token:${GITHUB_TOKEN}@github.com/$GITHUB_REPOSITORY
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - uses: pnpm/[email protected]
       - name: Use Node.js
         uses: actions/[email protected]
@@ -36,3 +37,4 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true