Generate SBOM and attest artifacts

[martincostello]

• Generate an SBOM for the Windows publish output.
• Attest the binaries and packages on Windows.

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 97.78%. Comparing base (8e20600) to head (da3c0b5). Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #629   +/-   ##
=======================================
  Coverage   97.78%   97.78%           
=======================================
  Files          15       15           
  Lines         271      271           
  Branches       37       37           
=======================================
  Hits          265      265           
  Misses          3        3           
  Partials        3        3           

Flag	Coverage Δ
linux	97.04% <ø> (ø)
macos	97.78% <ø> (ø)
windows	97.04% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

[martincostello]

#634