Create Artifact Metadata Storage Record on registry push

[malancas]

Adds support for creating artifact storage records if the push-to-registry and create-storage-record options are set to true. If the Action fails to create a storage record, it gracefully handles the error and continues.

[Copilot]

Pull request overview

This PR adds support for creating artifact metadata storage records when pushing attestations to a registry. The feature is controlled by a new create-storage-record input that defaults to true when push-to-registry is enabled.

Key changes:

• New create-storage-record input parameter and corresponding logic to create storage records via the @actions/attest library
• Graceful error handling for storage record creation failures (logs warnings instead of failing the workflow)
• New storage-record-ids output to expose the created storage record IDs

Reviewed changes

Copilot reviewed 7 out of 9 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
src/main.ts	Added createStorageRecord input field, output handling for storage record IDs, and logging for created storage records
src/index.ts	Added input parsing for the new create-storage-record parameter
src/attest.ts	Implemented storage record creation logic with protocol validation, error handling, and integration with the @actions/attest library
package.json	Updated version to 3.1.0 and bumped @actions/attest dependency to ^2.1.0
action.yml	Added create-storage-record input definition and storage-record-ids output definition
tests/main.test.ts	Added test coverage for successful storage record creation and graceful failure handling
README.md	Updated documentation to describe the new feature, required permissions, and outputs

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[bdehamer]

You need run npm run bundle and check in the result /dist changes, but this looks good otherwise.