Publish package with attestations

Follow up to #1123.

Author: nicoddemus

.github/workflows/deploy.yml

@@ -40,6 +40,8 @@ jobs:
 
     - name: Publish package to PyPI
       uses: pypa/[email protected]
+      with:
+        attestations: true
 
     - name: Push tag
       run: |