- Create build job that compiles main.js and styles.css
- Add attest job using actions/attest-build-provenance for both assets
- Create release job that publishes artifacts with their attestations
- Enables users to cryptographically verify release asset provenance
