Apply `actions/attest@v4` action for our builds

[alexander-yevsyukov]

The attest action is necessary for builds publishing to Maven Central. It is also highly desired when publishing to GitHub Packages.

GitHub recommends using attest for new projects:

uses: actions/attest@v4