add provenance to published package

Author: alexlipovka

.github/workflows/publish.yml

@@ -49,4 +49,4 @@ jobs:
         run: npm pkg delete private
 
       - name: Publish package
-        run: npm publish --ignore-scripts --access public
+        run: npm publish --ignore-scripts --access public --tag latest --provenance