fix: update release workflow for new npm token requirements

- Add NPM_CONFIG_PROVENANCE for npm provenance support
- Classic tokens were revoked on Dec 9, 2025
- Now uses granular access tokens with provenance

Author: Schero94

.github/workflows/semantic-release.yml

@@ -12,7 +12,7 @@ jobs:
       contents: write
       issues: write
       pull-requests: write
-      id-token: write
+      id-token: write  # Required for npm provenance
 
     steps:
       - name: Checkout
@@ -41,4 +41,5 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
         run: npx semantic-release