support for artifact attestations

now that the capability is available in beta, i want to start looking into what it would take to support through semantic-release

https://github.blog/changelog/2024-05-02-artifact-attestations-public-beta/