figure out a workflow that I like for publishing to npm with provenance

[electrovir]

see https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions

On one hand, I don't like the idea of relying on a CI pipeline because it breaks the local dev cycle, especially because GitHub Actions is so much slower than my computer. However, I also like automating things and I like those shiny provenance badges on npm (examples here: https://www.npmjs.com/package/prisma/v/5.17.0?activeTab=versions).