Consume GitHub releases

[migmartri]

We want to be able to attest a gitHub release in an easy way.

Ideally, we could have a reusable workflow/action that reacts to a release event and performs an attestation of all the published artifacts.

As explained here https://github.com/chainloop-dev/chainloop/pull/772#discussion_r1599939348 we can download all the artifacts using the GH CLI, and then we could push them to Chainloop by using a CHAINLOOP_TOKEN

We could even automatically create a workflow if needed using also our new reusable workflow for that purpose cc/ @jiparis

### Tasks
- [ ] https://github.com/chainloop-dev/chainloop/issues/786
- [ ] https://github.com/chainloop-dev/chainloop/issues/788
- [ ] https://github.com/chainloop-dev/chainloop/issues/787
- [ ] Think about having a badge