[ef-42] feat: re-add --provenance to npm publish for public repo

[NiveditJain]

Summary

• Re-adds --provenance flag to npm publish in the publish workflow
• Re-adds id-token: write permission required for npm provenance attestation
• These were removed in 407611f because npm provenance requires a public repository — now that the repo is going public, re-enable them

Test plan

• Verify CI passes on this PR
• Provenance attestation will be validated on the next npm publish triggered by a GitHub release

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Enhanced package publishing workflow with improved security and verification capabilities through provenance support.

[coderabbitai]

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Free

Run ID: 02528dd3-8844-442c-b971-de8cbec5db79

📥 Commits

Reviewing files that changed from the base of the PR and between 74b1518 and da04515.

📒 Files selected for processing (1)

• .github/workflows/publish.yml

---

📝 Walkthrough

Walkthrough

The GitHub Actions publish workflow is updated to enable npm package provenance. The job permissions are expanded to include id-token: write alongside existing contents: read, and the npm publish command includes the --provenance flag for generating package provenance data.

Changes

Cohort / File(s)	Summary
GitHub Actions Workflow Configuration .github/workflows/publish.yml	Added id-token: write permission and appended --provenance flag to npm publish command to enable provenance attestation for published packages.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 A hoppy skip through workflow gates,
We seal our packages with provenance weights,
Trust tokens signed, npm approved,
Our rabbit's signature: proved! ✨

---

Note

🎁 Summarized by CodeRabbit Free

Your organization is on the Free plan. CodeRabbit will generate a high-level summary and a walkthrough for each pull request. For a comprehensive line-by-line review, please upgrade your subscription to CodeRabbit Pro by visiting https://app.coderabbit.ai/login.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}