docker: davejansen.dev/davejansen: use-sigstore-attachments: true