fix: remove provenance flag from npm publish command and adjust environment variable usage

Author: hebertcisco

.github/workflows/publish.yml

@@ -14,6 +14,7 @@ jobs:
     environment: npm
     env:
       NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+      NPM_CONFIG_PROVENANCE: ${{ github.event.repository.private && 'false' || 'true' }}
     permissions:
       contents: read
       id-token: write
@@ -41,6 +42,6 @@ jobs:
 
       - name: Publish with token fallback
         if: ${{ env.NPM_TOKEN != '' }}
-        run: npm publish --provenance --access public
+        run: npm publish --access public
         env:
           NODE_AUTH_TOKEN: ${{ env.NPM_TOKEN }}