Add attestations

.github/workflows/ci.yml

@@ -101,7 +101,23 @@ jobs:
         name: gn-language-server-${{ matrix.rust_target }}
         path: vscode-gn/dist/gn-language-server*
 
-  upload-artifacts:
+  attestation:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      attestations: write
+    needs:
+      - build
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/download-artifact@v4
+        with:
+          path: ${{ github.workspace }}/artifacts
+      - uses: actions/attest-build-provenance@v3
+        with:
+          subject-path: artifacts/**
+
+  upload-release-artifacts:
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -124,7 +140,7 @@ jobs:
   publish-vscode:
     runs-on: ubuntu-latest
     needs:
-      - upload-artifacts
+      - build
     steps:
       - uses: actions/checkout@v4
       - uses: actions/download-artifact@v4
@@ -152,7 +168,7 @@ jobs:
   publish-cargo:
     runs-on: ubuntu-latest
     needs:
-      - upload-artifacts
+      - build
     steps:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@fbaa7e9cfc198f7c12d653f12beae9646e216b29  # 1.85.1