chore: configure npmPublishProvenance in .yarnrc.yml

Remove --provenance flags from publish commands as they are now handled automatically by Yarn configuration.

Changes:
- Replace npmAuthToken with npmPublishProvenance: true in .yarnrc.yml
- Remove --provenance flags from yarn npm publish commands

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: jkebinger

.github/workflows/release.yaml

@@ -76,9 +76,9 @@ jobs:
       - name: Publish to npm
         run: |
           if [ "${{ needs.check-version.outputs.is-prerelease }}" == "true" ]; then
-            yarn npm publish --provenance --access public --tag ${{ needs.check-version.outputs.npm-tag }}
+            yarn npm publish --access public --tag ${{ needs.check-version.outputs.npm-tag }}
           else
-            yarn npm publish --provenance --access public
+            yarn npm publish --access public
           fi
 
   create-release:

.yarnrc.yml

@@ -1,3 +1,3 @@
 nodeLinker: node-modules
 npmRegistryServer: 'https://registry.npmjs.org'
-npmAuthToken: '${NPM_AUTH_TOKEN}'
+npmPublishProvenance: true