SLSA v1.0 verification support for npm packages built by the npm cli

Verification support for the npm CLI as defined by [RFC-0049](https://github.com/npm/rfcs/blob/main/accepted/0049-link-packages-to-source-and-build.md#sigstore-integration-in-the-npm-cli)