This milestone will add a new reusable workflow to build and publish Node.js npm packages with that means the provenance requirements
for SLSA Level 3 by simply adding a new job to their existing GitHub Actions workflow.

This will serve as the "Trusted Builder" for npm RFC-0049.