GH CI: Add Provenance Support (Security Enhancement)

## Feature Request

### Description
This allows you to publicly establish where a package was built and who published a package, which can increase supply-chain security for your packages.

This is a super easy publish command change.
Only a NPM parameter needs to be added to the existing publish pipeline. (by default)

### Overview
Publish this package using only GitHub actions and enable Provenance to enable the ability cryptographically to attest that the package hasn't been tampered with during build, publish, and transport.

This can be done via `npm audit signatures` automatically.

NPM Docs:
https://docs.npmjs.com/generating-provenance-statements

### Examples

Before: `npm publish`

After: `npm publish --provenance`

Consuming attestation signatures:
https://docs.npmjs.com/generating-provenance-statements#verifying-provenance-attestations