Test out GitHub build attestations (#9711)

Unsure what will happen, but it probably can't break things too much...
right?

cc #9698

.github/workflows/publish-artifacts.yml

@@ -6,6 +6,8 @@ on:
 
 permissions:
   contents: write
+  id-token: write
+  attestations: write
 
 jobs:
   publish:
@@ -34,6 +36,10 @@ jobs:
       with:
         path: "./gh-pages/gh-pages"
 
+    - uses: actions/attest-build-provenance@v1
+      with:
+        subject-path: 'dist/*'
+
     - run: npm install --production
       working-directory: .github/actions/github-release
     - name: Publish Release