Upload attestations to PyPI

They'll be cool to look at or something

.github/workflows/release.yml

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 740eae6..7fc52d8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -54,3 +54,5 @@
       - name: publish
         if: github.event_name == 'push'
         uses: pypa/gh-action-pypi-publish@8a08d616893759ef8e1aa1f2785787c0b97e20d6 # v1.10.0
+        with:
+          attestations: true