GitHub artifact attestations are unavailable for private repositories
under personal accounts. The publish job already tags images successfully;
only the attest step failed. Gate attestation on visibility and owner type
so org and public repositories still attest.
Co-authored-by: cynarAI <cynarAI@users.noreply.github.com>
dc84694353