Enable supply chain security through npm provenance attestation

- Configure GitHub Actions workflow for secure publishing
- Enable automatic provenance generation during npm publish
- Add integrity verification through Sigstore transparency logs

.github/workflows/deploy.yml

@@ -12,6 +12,8 @@ env:
 
 permissions:
   contents: read
+  id-token: write      # Required for provenance
+  packages: write      # Required for publishing
 
 jobs:
   build:
@@ -61,6 +63,6 @@ jobs:
           registry-url: "https://registry.npmjs.org"
 
       - name: Publish on npm
-        run: npm publish
+        run: npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}