setting up NPM Provenance

[paulmarsicloud]

Description

Adding NPM package provenance for Spectacle releases

Type of Change

• [x] New feature (non-breaking change which adds functionality)

How Has This Been Tested?

N/A - when this is merged, we will see build summary on NPM website

Checklist: (Feel free to delete this section upon completion)

• [x] I have included a changeset if this change will require a version change to one of the packages.
• [x] I have performed a self-review of my own code
• [x] I have commented my code, particularly in hard-to-understand areas
• [x] I have made corresponding changes to the documentation
• [x] I have run pnpm run check:ci and all checks pass
• [x] I have added tests that prove my fix is effective or that my feature works
• [x] My changes generate no new warnings
• [x] Any dependent changes have been merged and published in downstream modules