Generate provenance statements when publishing to npm

https://docs.gitlab.com/ee/ci/yaml/signing_examples.html#prerequisites