fix: Add permission for package provenance.

https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions

Author: halfninja

.github/workflows/finalize-release.yml

@@ -16,6 +16,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
+      id-token: write # For provenance
 
     steps:
       - name: Get PR details