Publish package with attestations

Follow up to #454

Author: nicoddemus

.github/workflows/deploy.yml

@@ -47,6 +47,8 @@ jobs:
 
     - name: Publish package to PyPI
       uses: pypa/[email protected]
+      with:
+        attestations: true
 
     - name: Push tag
       run: |