- Add --provenance flag to pnpm publish command in version workflow - Add explanatory comment for id-token write permission - Add test verifying id-token write permission for provenance - Add test verifying --provenance flag is present in publish step