Update GitHub Actions for enhanced publishing workflow

- Update GitHub workflow to enhance permissions for content access and ID token writing.
- Modify the publish command to improve provenance tracking in the deployment process.

Signed-off-by: katsumata <12413150+winor30@users.noreply.github.com>

Author: winor30

.github/workflows/publish.yml

@@ -8,6 +8,10 @@ jobs:
   publish:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: read
+      id-token: write
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -28,6 +32,6 @@ jobs:
         run: pnpm run build
 
       - name: Publish
-        run: pnpm publish --access public --no-git-checks
+        run: pnpm publish --provenance --access public --no-git-checks
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}