Publish SBOM / Attestation along with published chart

[crandles]

Consider publishing a SBOM / attestation digest along with the chart published to GHCR.

Ref: https://github.com/actions/attest-build-provenance?tab=readme-ov-file#container-image