chore(release): add npm provenance support to GHA release

[ndom91]

☕️ Reasoning

• Adds GitHub provenance badge to our npm publishes
• imo especially worthwhile for security / auth related packages

More info on provenance: https://github.blog/2023-04-19-introducing-npm-package-provenance/

Examples from tailwindcss:

See Also

• Publishing with provenance from GHA: https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions
• Using 3rd party publishing tools (like pnpm like we do): https://docs.npmjs.com/generating-provenance-statements#using-third-party-package-publishing-tools
  • Daniel Roe (from nuxt) confirms that should work with pnpm: Support pnpm publish --provenance pnpm/pnpm#6435 (comment)

🧢 Checklist

• Documentation
• Tests
• Ready to be merged

🎫 Affected issues

📌 Resources

• Security guidelines
• Contributing guidelines
• Code of conduct
• Contributing to Open Source

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Updated (UTC)
auth-docs	✅ Ready (Inspect)	Visit Preview	Apr 24, 2024 2:27pm

1 Ignored Deployment

Name	Status	Preview	Updated (UTC)
next-auth-docs	⬜️ Ignored (Inspect)		Apr 24, 2024 2:27pm

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 40.47%. Comparing base (0089c93) to head (49b045e).

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #10712   +/-   ##
=======================================
  Coverage   40.47%   40.47%           
=======================================
  Files         172      172           
  Lines       27760    27760           
  Branches     1177     1171    -6     
=======================================
  Hits        11236    11236           
  Misses      16524    16524           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.