Auto-attach Grype report as release asset

[RothAndrew]

As a user of this image I want to be aware of what vulnerabilities it has, so that I have all the info I need when deciding whether I am able to use it in any particular environment.

As a developer of this image I want to be aware of the changes in vulnerabilities as I make my changes, so that I can ensure that I am not adding new unknown vulnerabilities.

AC:

• Whenever a new release is created, after the image has been built and pushed, a Grype report of the Syft SBOM is automatically attached to the release as a release artifact