Tweaks to release.yml workflow (#50)

* Update release.yml
- explicitly use pypa/gh-action-pypi-publish v1.12.2
- set 'attestations' and 'verbose' to true to help diagnose failures
- add tag pattern to trigger running on "X.Y.Z.postN" tags

Author: josh-hadley

.github/workflows/release.yml

@@ -4,6 +4,7 @@ on:
   push:
     tags:
       - '\d+\.\d+\.[0-9a-z]+'
+      - '\d+\.\d+\.[0-9a-z]+\.post\d+'
 
   workflow_dispatch:
     inputs:
@@ -98,7 +99,10 @@ jobs:
         path: dist
 
     - name: Publish dist(s) to PyPI
-      uses: pypa/gh-action-pypi-publish@release/v1
+      uses: pypa/gh-action-pypi-publish@15c56dba361d8335944d31a2ecd17d700fc7bcbc # v1.12.2
+      with:
+        attestations: true
+        verbose: true
 
     - name: Create GitHub Release
       uses: softprops/action-gh-release@v2