build(deps): Bump the actions-minor group across 1 directory with 2 updates

Bumps the actions-minor group with 2 updates in the / directory: [anchore/sbom-action](https://github.com/anchore/sbom-action) and [actions/attest-sbom](https://github.com/actions/attest-sbom).


Updates `anchore/sbom-action` from 0.19.0 to 0.20.1
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@9f73021...9246b90)

Updates `actions/attest-sbom` from 2.2.0 to 2.4.0
- [Release notes](https://github.com/actions/attest-sbom/releases)
- [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md)
- [Commits](actions/attest-sbom@115c3be...bd218ad)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-version: 0.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/attest-sbom
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

.github/workflows/attest-and-deploy.yml

@@ -30,7 +30,7 @@ jobs:
 
       # Generate SBOM from the dependencies (scanning the workspace directory)
       - name: Generate SBOM
-        uses: anchore/sbom-action@9f7302141466aa6482940f15371237e9d9f4c34a
+        uses: anchore/sbom-action@9246b90769f852b3a8921f330c59e0b3f439d6e9
         with:
           upload-artifact: false
           upload-release-assets: false
@@ -54,7 +54,7 @@ jobs:
       #     subject-path: "dist.tar.gz"
 
       # Complete an attestation of the SBOM and the build
-      - uses: actions/attest-sbom@115c3be05ff3974bcbd596578934b3f9ce39bf68
+      - uses: actions/attest-sbom@bd218ad0dbcb3e146bd073d1d9c6d78e08aa8a0b
         with:
           subject-path: 'dist.tar.gz'
           sbom-path: 'sbom.spdx.json'