* feat(libnpmpublish): expose provenance transparency url

* chore: apply transparency url in 409 retry case

* chore: update workspaces/libnpmpublish/lib/publish.js

Co-authored-by: Gar <wraithgar@github.com>

---------

Co-authored-by: Gar <wraithgar@github.com>

Some registries (e.g. GH packages) require auth to check visibility,
and always return 404 when no auth is supplied. In this case we assume
the package is always private and require `--access public` to publish.

I've also updated this to only perform a visibility check when this is
actually needed (i.e. when `provenance` is true and `access` is not `public`).

Fixes #6436

Update `main` docs to add a comma

Because I had to do a double-take to understand what was going on