use --provenance for publishes to npm

[jbolda]

Motivation

Using the --provenance in an npm publish creates an annotation on the npm registry which shows that this was published through CI.

[github-actions[bot]]

Package Changes Through 9a75fa0cb559bf54deb326884ff49e4796f4d237

No changes.

Add a change file through the GitHub UI by following this link.

---

Read about change files or the docs at github.com/jbolda/covector