Add npm provenance enable flag for production npm build