Add contract build and attest workflow - #1020

## Bumps the all-actions group with 2 updates

- [docker/login-action](https://github.com/docker/login-action)
- [docker/build-push-action](https://github.com/docker/build-push-action)

---

## docker/login-action: 4.2.0 → 4.4.0

### Release notes (v4.4.0)

- Skip empty `registry-auth` secret mask by @crazy-max in #1035
- Bump `@aws-sdk/client-ecr` and `@aws-sdk/client-ecr-public` to 3.1077.0 in #1034

**Full Changelog:**  
docker/login-action@v4.3.0...v4.4.0

---

### Release notes (v4.3.0)

- Preserve names in esbuild bundle by @crazy-max in #1022
- Bump `@aws-sdk/client-ecr` and `@aws-sdk/client-ecr-public` to 3.1076.0 in #999 and #1030
- Bump `@docker/actions-toolkit` from 0.90.0 to 0.92.0 in #1004 and #1027
- Bump `@sigstore/core` from 3.1.0 to 3.2.1 in #1023
- Bump `@sigstore/verify` from 3.1.0 to 3.1.1 in #1029
- Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #1017
- Bump js-yaml from 4.1.1 to 5.2.0 in #1028
- Bump sigstore from 4.1.0 to 4.1.1 in #1031
- Bump tmp from 0.2.5 to 0.2.7 in #1002
- Bump undici from 6.24.1 to 6.27.0 in #1020
- Bump vite from 7.3.3 to 7.3.6 in #1019

**Full Changelog:**  
docker/login-action@v4.2.0...v4.3.0

---

## docker/build-push-action: 7.2.0 → 7.3.0

### Release notes (v7.3.0)

- Preserve names in esbuild bundle by @crazy-max in #1567
- Bump `@docker/actions-toolkit` from 0.90.0 to 0.92.0 in #1545 and #1572
- Bump `@sigstore/core` from 3.1.0 to 3.2.1 in #1568
- Bump js-yaml from 4.1.1 to 4.3.0 in #1566
- Bump tmp from 0.2.5 to 0.2.7 in #1547
- Bump undici from 6.24.1 to 6.27.0 in #1564
- Bump vite from 7.3.2 to 7.3.6 in #1563

**Full Changelog:**  
docker/build-push-action@v7.2.0...v7.3.0