Pushing artifacts as binaries to the project's GHCR. The build job is
split between AA and CDH+ASR. AA has specific build and runtime
requirements depending on the TEE, while the CDH+ASR are generic per
arch.

Hence AA is tagged with $sha-$tee ($arch is implicit in $tee) while
CDH+ASR are tagged with $sha-$arch.

AA-$sha-none is a multiarch image for amd64 & s390x.

Signed-off-by: Magnus Kulke <magnuskulke@microsoft.com>

To reduce duplucation among the workflows

Signed-off-by: Magnus Kulke <magnuskulke@microsoft.com>

If consumers retrieve guest-components via OCI instead of building them
themselves, it makes sense to add attestations so we can assert on the
consumer side that they have been built from untampered upstream
sources on github runners.

Signed-off-by: Magnus Kulke <magnuskulke@microsoft.com>

putting each permutation into an array is a more legible represenation.

Signed-off-by: Magnus Kulke <magnuskulke@microsoft.com>

Co-authored-by: Dan <dan.middleton@intel.com>
Signed-off-by: Magnus Kulke <mkulke@gmail.com>

Co-authored-by: Dan <dan.middleton@intel.com>
Signed-off-by: Magnus Kulke <mkulke@gmail.com>

Co-authored-by: Dan <dan.middleton@intel.com>
Signed-off-by: Magnus Kulke <mkulke@gmail.com>

Co-authored-by: Mikko Ylinen <mikko.ylinen@intel.com>
Signed-off-by: Magnus Kulke <mkulke@gmail.com>