feat: SLSA 1.0 provenance statement

[bdehamer]

Updates the provenance statement generated when publishing from GitHub Actions to be compliant w/ the SLSA 1.0 specification.

{
  "_type": "https://in-toto.io/Statement/v1",
  "subject": [
    {
      "name": "pkg:npm/%40ps-testing/dummy-provenance@1.0.0-5413135963.1",
      "digest": {
        "sha512": "f5a4afe14c8f353345bf27881b0100aef45739ff4ac5bc209e18200090873dde63e8bbc739b76eda12b1f2f0589c7374f9e3a15b409fbaa294c7934b48d275b9"
      }
    }
  ],
  "predicateType": "https://slsa.dev/provenance/v1",
  "predicate": {
    "buildDefinition": {
      "buildType": "https://slsa-framework.github.io/github-actions-buildtypes/workflow/v1",
      "externalParameters": {
        "workflow": {
          "ref": "refs/heads/bdehamer/slsa-1",
          "repository": "https://github.com/npm/provenance-tests",
          "path": ".github/workflows/publish-with-provenance.yml"
        }
      },
      "internalParameters": {
        "github": {
          "event_name": "workflow_dispatch",
          "repository_id": "566758891",
          "repository_owner_id": "6078720"
        }
      },
      "resolvedDependencies": [
        {
          "uri": "git+https://github.com/npm/provenance-tests@refs/heads/bdehamer/slsa-1",
          "digest": {
            "gitCommit": "8391d397739aa2afe1213b9d1c19c2cc5f648135"
          }
        }
      ]
    },
    "runDetails": {
      "builder": {
        "id": "https://github.com/actions/runner/github-hosted"
      },
      "metadata": {
        "invocationId": "https://github.com/npm/provenance-tests/actions/runs/5413135963/attempts/1"
      }
    }
  }
}

[feelepxyz]

This looks good to me 👍