chore(ci): allow manual publish without provenance

Author: adamchal

.github/workflows/npm-publish.yml

@@ -9,6 +9,14 @@ on:
         description: Release tag to publish
         required: true
         default: v0.3.0
+      provenance:
+        description: Publish with npm provenance
+        required: true
+        default: "true"
+        type: choice
+        options:
+          - "true"
+          - "false"
 
 permissions:
   contents: read
@@ -50,4 +58,11 @@ jobs:
         run: deno task pack:release
 
       - name: Publish npm package
-        run: npm publish ./*.tgz --access public
+        env:
+          NPM_PROVENANCE: ${{ inputs.provenance || 'true' }}
+        run: |
+          if [ "${NPM_PROVENANCE}" = "false" ]; then
+            npm publish ./*.tgz --access public --provenance=false
+          else
+            npm publish ./*.tgz --access public
+          fi