chore: publish package provenance info (#12779)

.changeset/fluffy-kings-complain.md

@@ -0,0 +1,5 @@
+---
+'svelte': patch
+---
+
+chore: publish package provenance info

.github/workflows/release.yml

@@ -12,6 +12,7 @@ jobs:
     if: github.repository == 'sveltejs/svelte'
     permissions:
       contents: write # to create release (changesets/action)
+      id-token: write # OpenID Connect token needed for provenance
       pull-requests: write # to create pull request (changesets/action)
     name: Release
     runs-on: ubuntu-latest

packages/svelte/package.json

@@ -154,5 +154,8 @@
     "project": [
       "src/**"
     ]
+  },
+  "publishConfig": {
+    "provenance": true
   }
 }