fix: add subject-path to build provenance attestation

Resolves CI error where actions/attest-build-provenance requires
one of subject-path, subject-digest, or subject-checksums parameters.

Author: elieteyssedou

.github/workflows/release.yml

@@ -11,6 +11,7 @@ permissions:
   contents: write
   pull-requests: write
   id-token: write # Required for npm provenance
+  attestations: write # Required for build provenance attestations
 
 jobs:
   release:
@@ -44,6 +45,8 @@ jobs:
 
       - name: Attest Build Provenance
         uses: actions/[email protected]
+        with:
+          subject-path: 'packages/*/dist/**'
 
       - name: Create Release Pull Request or Publish to npm
         id: changesets