chore: enable npm provenance

[dsanders11]

Since this project uses semantic-release to publish directly from GitHub Actions, this should be a straightforward change to start publishing the npm package with provenance, which is a nice little benefit.