ci(backport): Add GitHub artifact attestations to package distribution

[meeseeksmachine]

Backport PR #2473: ci: Add GitHub artifact attestations to package distribution

• Backport:
  • PR ci: Add GitHub artifact attestations to package distribution #2473
  • PR build(deps): bump actions/attest-build-provenance from 1.0.0 to 1.1.2 in the actions group #2478

* Backport:
   - PR https://github.com/scikit-hep/pyhf/pull/2473
   - PR https://github.com/scikit-hep/pyhf/pull/2478

---------

Co-authored-by: Matthew Feickert <matthew.feickert@cern.ch>

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Please upload report for BASE (release/v0.7.x@1de3759). Learn more about missing BASE report.

❗ Current head 305e55a differs from pull request most recent head a3cbf14

Please upload reports for the commit a3cbf14 to get more accurate results.

Additional details and impacted files

@@                Coverage Diff                @@
##             release/v0.7.x    #2496   +/-   ##
=================================================
  Coverage                  ?   96.45%           
=================================================
  Files                     ?       69           
  Lines                     ?     4545           
  Branches                  ?      803           
=================================================
  Hits                      ?     4384           
  Misses                    ?      125           
  Partials                  ?       36           

Flag	Coverage Δ
unittests-3.10	96.25% <ø> (?)
unittests-3.11	96.25% <ø> (?)
unittests-3.7	96.23% <ø> (?)
unittests-3.9	96.30% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.