👷 misc(CD): create attestation for packaged executables

Author: welpo

.github/workflows/cd.yml

@@ -61,7 +61,7 @@ jobs:
         shell: bash
         run: poetry run python -m nuitka --github-workflow-options shuku/cli.py
 
-      - name: Generate attestation
+      - name: Generate build attestation
         uses: actions/attest-build-provenance@v1
         with:
           subject-path: 'build/shuku*'
@@ -114,6 +114,11 @@ jobs:
             (cd dist && sha256sum "$archive_name" > "$archive_name.sha256")
           done
 
+      - name: Generate package attestations
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: 'dist/*'
+
       - name: Upload artifacts
         uses: actions/upload-artifact@v4
         with: