Fix release workflow: set NPM_CONFIG_PROVENANCE for OIDC auth

The changeset publish command doesn't forward --provenance to the
underlying npm publish calls. Setting NPM_CONFIG_PROVENANCE=true as
an env var ensures npm uses OIDC for every publish.

Author: brielov

.github/workflows/release.yml

@@ -34,3 +34,4 @@ jobs:
           publish: npx changeset publish --provenance
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_CONFIG_PROVENANCE: "true"