chore(repo): add --provenance to publishes (#29)

this commit re-adds package provenance to the publish-npm action. we
previously removed this while the repo was private (as --provenance is
not supported for private repos). once the repo is public again, we'd
like all packages to have provenance enabled.

STENCIL-1206

Author: rwaskiewicz

.github/workflows/actions/publish-npm/action.yml

@@ -59,8 +59,6 @@ runs:
       env:
         NPM_TOKEN: ${{ inputs.token }}
 
-    # TODO(STENCIL-1206): Add --provenance flag to the command after we've made the repo public
-    # https://github.blog/changelog/2023-07-26-publishing-with-npm-provenance-from-private-source-repositories-is-no-longer-supported/
     - name: Publish to NPM
-      run: npm publish --tag ${{ inputs.tag }}
+      run: npm publish --tag ${{ inputs.tag }} --provenance
       shell: bash