Provenance while publishing was removed in a5b6b496. When publishing with
OIDC, we still need the `SIGSTORE_ID_TOKEN` id token.