fix: 修复发布 npm 包 provenance 的问题

Author: cloudcome

.github/workflows/release-please.yml

@@ -39,6 +39,8 @@ jobs:
 
   publish-npm:
     runs-on: ubuntu-latest
+    permissions:
+        id-token: write
     needs: test-coverage
     steps:
       - uses: actions/checkout@v3