feat(ci): attest build provenance (#41)

## Estate attestation rollout

Adds GitHub native build-provenance attestation to
`.github/workflows/ghcr-publish.yml`.

**Push mechanism:** nerdctl (`nerdctl build` + `nerdctl push` to
ghcr.io), image `ghcr.io/${{ github.repository }}`.

**How the digest is obtained:** `nerdctl push` has no `--digestfile`
flag, so immediately after the push the workflow reads the real
`sha256:...` digest back from the registry with `skopeo inspect --format
'{{.Digest}}'` (skopeo is pre-installed on `ubuntu-latest`),
authenticating with the same `GITHUB_TOKEN`. That digest is exported as
the `push` step output and fed to the attestation as `subject-digest` —
it is the exact digest the registry holds for the pushed tag, not a
guess.

**Changes:**
- Added `id-token: write` + `attestations: write` to the job
permissions.
- Captured the pushed digest via `skopeo inspect`.
- Added an `actions/attest-build-provenance@e8998f94…` (v2, pinned) step
with `push-to-registry: true`.

Verify with:
```
gh attest verify oci://ghcr.io/hyperpolymath/conflow:<tag> --repo hyperpolymath/conflow
```

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/ghcr-publish.yml

@@ -16,6 +16,8 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write       # mint the OIDC token the attestation is signed with
+      attestations: write   # write the build-provenance attestation (the "claim")
     steps:
       - name: Checkout repository
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
@@ -41,9 +43,27 @@ jobs:
           sudo nerdctl build -f Containerfile -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }} .
           sudo nerdctl tag ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }} ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
       - name: Push image
+        id: push
         run: |
           sudo nerdctl push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}
           sudo nerdctl push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
+          # nerdctl push has no --digestfile, so read the real sha256 back from
+          # the registry with skopeo (pre-installed on ubuntu-latest). This is
+          # the digest the registry actually holds for the pushed tag.
+          DIGEST="$(skopeo inspect --format '{{.Digest}}' \
+            --creds "${{ github.actor }}:${{ secrets.GITHUB_TOKEN }}" \
+            docker://${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }})"
+          echo "digest=$DIGEST" >> "$GITHUB_OUTPUT"
+      # GitHub native artifact attestation (build provenance) for the pushed
+      # image. Verify with:
+      #   gh attest verify oci://ghcr.io/${{ github.repository }}:<tag> \
+      #     --repo ${{ github.repository }}
+      - name: Attest container provenance
+        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
+        with:
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true
       - name: Tag release version
         if: github.event_name == 'release'
         run: |