Create properly attested releases and a proper automated CD pipeline.

[dpranke]

It's high time I switch to something that can create SLSA-compliant packages with the proper attestations, and automate releases via some CD pipeline rather than releasing locally built packages.