Re-add tested build provenance attestations

.github/workflows/publish-exe.yml

@@ -8,6 +8,12 @@ name: Publish Releases
 jobs:
   build_publish:
     name: Publishing Tasks
+
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
+
     strategy:
       matrix:
         target:
@@ -84,6 +90,17 @@ jobs:
             fi
           fi
 
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: bin-${{ matrix.target }}
+          path: mypubdir4/*
+
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: mypubdir4/*
+
       - name: Publish
         uses: softprops/action-gh-release@v1
         env: