⬆️👨‍💻 Update actions/attest-build-provenance action to v1.4.4 (#502)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance)
| action | patch | `v1.4.3` -> `v1.4.4` |

---

### Release Notes

<details>
<summary>actions/attest-build-provenance
(actions/attest-build-provenance)</summary>

###
[`v1.4.4`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.4.4)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.4.3...v1.4.4)

#### What's Changed

- Bump predicate action from 1.1.3 to 1.1.4 by
[@&#8203;bdehamer](https://redirect.github.com/bdehamer) in
[https://github.com/actions/attest-build-provenance/pull/310](https://redirect.github.com/actions/attest-build-provenance/pull/310)
- Bump [@&#8203;actions/core](https://redirect.github.com/actions/core)
from 1.10.1 to 1.11.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/actions/attest-build-provenance/pull/275](https://redirect.github.com/actions/attest-build-provenance/pull/275)
- Bump
[@&#8203;actions/attest](https://redirect.github.com/actions/attest)
from 1.4.2 to 1.5.0 by
[@&#8203;bdehamer](https://redirect.github.com/bdehamer) in
[https://github.com/actions/attest-build-provenance/pull/309](https://redirect.github.com/actions/attest-build-provenance/pull/309)
- Fix SLSA provenance bug related to `workflow_ref` OIDC token claims
containing the "@&#8203;" symbol in the tag
[https://github.com/actions/toolkit/pull/1863](https://redirect.github.com/actions/toolkit/pull/1863)l/1863)

**Full Changelog**:
actions/attest-build-provenance@v1.4.3...v1.4.4

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekend" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/cda-tum/mqt-qcec).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS43LjEiLCJ1cGRhdGVkSW5WZXIiOiIzOS43LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdpdGh1Yi1hY3Rpb25zIl19-->

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/cd.yml

@@ -60,7 +60,7 @@ jobs:
           path: dist
           merge-multiple: true
       - name: Generate artifact attestation for sdist and wheel(s)
-        uses: actions/attest-build-provenance@v1.4.3
+        uses: actions/attest-build-provenance@v1.4.4
         with:
           subject-path: "dist/*"
       - uses: pypa/gh-action-pypi-publish@release/v1