Enable immutable releases

[ericcornelissen]

Description:
This action should enable immutable releases, just like actions/attest-build-provenance has.

Justification:
To help protect users against potential attacks such as GHSA-mrrh-fwg8-r2c3 by preventing re-pointing (released) tags to different commits.

Are you willing to submit a PR?
n/a

[aparnajyothi-y]

Hello @ericcornelissen, Thanks for creating this issue and we will get back to you once we have some feedback on this :)