fix: use docker-container driver for release, docker for snapshot

Release builds need docker-container for multi-platform --push.
Snapshot builds need docker for local image loading (retag/push).
Select driver based on ref type.

Remove attestation disabling from release dockers_v2 config since
docker-container supports attestations natively.

Author: jevonearth

.github/workflows/build.yaml

@@ -55,7 +55,7 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
         with:
-          driver: docker
+          driver: ${{ startsWith(github.ref, 'refs/tags/v') && 'docker-container' || 'docker' }}
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
 

.goreleaser.yml

@@ -251,9 +251,6 @@ dockers_v2:
       org.opencontainers.image.revision: '{{.FullCommit}}'
       org.opencontainers.image.version: '{{.Version}}'
       org.opencontainers.image.source: '{{.GitURL}}'
-    sbom: false
-    flags:
-      - --provenance=false
     disable: '{{ .IsSnapshot }}'
   - id: snapshot
     ids: