ci: Publish with Provenance

Marked version: any

Markdown flavor: GitHub Flavored Markdown

Description

Added configurations to package.json and the CI workflow, so that the GitHub Actions Workflow and semantic-release generate provenance information for this package (see https://github.com/semantic-release/npm#npm-provenance).

Expectation

marked being published with verifiable Provenance data (see https://docs.npmjs.com/generating-provenance-statements)

Result

marked package containing verifiable Provenance data

What was attempted

Added publishing configuration to package.json
Added ID Token permissions to GitHub Actions workflow

Contributor

[ ] Test(s) exist to ensure functionality and minimize regression (if no tests added, list tests covering this PR); or,
[x] no tests required for this PR.
[ ] If submitting new feature, it has been documented in the appropriate places.

Committer

In most cases, this should be a different person than the contributor.

[ ] CI is green (no forced merge required).
[ ] Squash and Merge PR following conventional commit guidelines.

markedjs / marked