Merge pull request #219 from smlx/simplify-sbom

fix: avoid unnecessary SBOM variable in release workflow

Merge pull request #217 from smlx/attest-sbom

feat: attest SBOM as well as binary artefacts

Merge pull request #216 from smlx/sbom-auth

fix: authenticate the SBOM step

Merge pull request #215 from smlx/sbom-api

fix: use the GitHub REST API for SBOM

Merge pull request #196 from smlx/deduplicate-build

feat: deduplicate build

Merge pull request #190 from smlx/simplify-mock

feat: simplify mock handling

Merge pull request #176 from smlx/release-comment

fix: very minor workflow comment update

Merge pull request #173 from smlx/multiple-artifacts

feat: implement attesting of multiple binary artefacts

Merge pull request #167 from smlx/simplify

fix: simplify release workflow

Merge pull request #166 from smlx/update-action

feat: use ccv action instead of custom hackery