Now that we have a new extensions framework, we could add an OCI extension that can be attached to any workflow and will receive its attestations. Note that this is not a direct replacement of #28 (yet) but an optional feature
