ci: generate provenance statement on release to increase security

[tnkuehne]

Background

Following recent hacks on npm packages, it would be greatly appreciated if you could increase the trust level of the npm packages.

Summary

I added generation of provenance statements as outlined in this guide from npm: docs.npmjs.com/generating-provenance-statements

Manual Verification

I followed the steps in the npm guide and already contributed this to other npm packages.

Checklist

• Tests have been added / updated (for bug fixes / features)
• Documentation has been added / updated (for bug fixes / features)
• A patch changeset for relevant packages has been added (for bug fixes / features - run pnpm changeset in the project root)
• I have reviewed this pull request (self-review)

Future Work

Migrating to trusted publishing could further increase security.