fix: updated tags and pipeline

Author: ViljarVoidula

.github/workflows/npm-publish.yml

@@ -6,7 +6,7 @@ on:
             - 'main'
             - '**'
         tags:
-            - '*'
+        - 'v*'
 
 jobs:
     test:
@@ -55,6 +55,7 @@ jobs:
         if: success() && startsWith(github.ref, 'refs/tags/')
         permissions:
             id-token: write
+          contents: read
         steps:
             - name: Checkout code
               uses: actions/checkout@v4
@@ -72,6 +73,9 @@ jobs:
                   cache: 'pnpm'
                   registry-url: 'https://registry.npmjs.org'
 
+            - name: Update npm (required for provenance)
+              run: npm install -g npm@latest
+
             - name: Install dependencies using pnpm
               run: pnpm install --frozen-lockfile