Configure npm publish workflow with provenance support

Updated publish workflow to include provenance and removed npm whoami step.

Author: bteng22

.github/workflows/publish.yml

@@ -7,6 +7,7 @@ on:
 permissions:
   contents: read
   packages: write
+  id-token: write # for provenance and publish access
 
 jobs:
   publish-npm:
@@ -22,6 +23,4 @@ jobs:
       - run: npm version ${TAG_NAME} --git-tag-version=false --allow-same-version
         env:
           TAG_NAME: ${{ github.event.release.tag_name }}
-      - run: npm whoami; npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.npm_token }}
+      - run: npm publish --provenance