ci: generate provenance statement on release to increase security

[tnkuehne]

Description

Following recent hacks on npm packages, it would be greatly appreciated if you could increase the trust level of the npm packages.

I added generation of provenance statements as outlined in this guide from npm: docs.npmjs.com/generating-provenance-statements

Additional context

If you want to further increase security, you may want to migrate to trusted publishing

---

What is the purpose of this pull request?

• Bug fix
• New Feature
• Documentation update
• Other

Before submitting the PR, please make sure you do the following

• Read the Contributing Guidelines.
• Follow the Style Guide.
• Check that there isn't already a PR that solves the problem the same way to avoid creating a duplicate.
• Provide a description in this PR that addresses what the PR is solving, or reference the issue that it solves (e.g. fixes #123).