Update publish process

[nickytonline]

Side note, but the build process for this package is odd. You run npm run build and commit the build artifacts.

Not even sure why we commit build artifacts atm as the publish workflow runs.

      - run: npm ci
      - run: npm run build
      - run: npm publish

so build artifacts would get generated. We should also update the publishing workflow:

• npm Trusted Publishing
• npm Provenance Statements
• GitHub Actions Security Hardening

Originally posted by @nickytonline in #118 (comment)