Enable provenance for npm publishing

This adds the `--provenance` flag to `npm publish` commands in both production and RC release workflows. This enhances supply chain security by attaching verifiable build information to published packages.

Author: al-af

.github/workflows/production-release.yml

@@ -178,7 +178,7 @@ jobs:
           NODE_AUTH_TOKEN: ''
         run: |
           echo "Publishing version $VERSION to npm..."
-          npm publish
+          npm publish --provenance
           echo "Published $VERSION to npm"
 
       - name: Dry-run publish

.github/workflows/rc-release.yml

@@ -484,7 +484,7 @@ jobs:
         if: ${{ needs.validate-release.outputs.is_dry_run != 'true' }}
         env:
           NODE_AUTH_TOKEN: ''
-        run: npm publish --tag rc
+        run: npm publish --tag rc --provenance
 
   # ===========================================================================
   # Create Pre-Release Tag