setting up NPM Provenance

[paulmarsicloud]

Description

Adding NPM package provenance for Spectacle releases

Type of Change

• New feature (non-breaking change which adds functionality)

How Has This Been Tested?

N/A - when this is merged, we will see build summary on NPM website

Checklist: (Feel free to delete this section upon completion)

• I have included a changeset if this change will require a version change to one of the packages.
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have run pnpm run check:ci and all checks pass
• I have added tests that prove my fix is effective or that my feature works
• My changes generate no new warnings
• Any dependent changes have been merged and published in downstream modules

[gksander]

lgtm