Do multiple attestations in the same step

Signed-off-by: Taylor Smock <tsmock@meta.com>

.github/workflows/ant.yml

@@ -116,14 +116,10 @@ jobs:
  cd $GITHUB_WORKSPACE/josm/plugins/${{ github.event.repository.name }}
  ant -noinput -buildfile build.xml -Dplugin.version=${{ steps.version.outputs.version }}
 
- - name: Perform attestation (jar)
+ - name: Perform attestation
  uses: actions/attest-build-provenance@v1
  with:
- subject-path: josm/dist/${{ inputs.plugin-jar-name }}.jar
- - name: Perform attestation (sources)
- uses: actions/attest-build-provenance@v1
- with:
- subject-path: josm/dist/${{ inputs.plugin-jar-name }}-sources.jar
+ subject-path: josm/dist/${{ inputs.plugin-jar-name }}.jar, josm/dist/${{ inputs.plugin-jar-name }}-sources.jar, josm/dist/${{ inputs.plugin-jar-name }}-javadoc.jar
 
  - name: Upload plugin build
  id: cache-plugin-build

README.md

@@ -45,9 +45,16 @@ jobs:
  permissions:
  id-token: write
  attestations: write
+ contents: write
+ packages: write
  uses: JOSM/JOSMPluginAction/.github/workflows/ant.yml@v2
 ```
 
+## Permissions reference:
+* `id-token` and `attestations`: For writing attestation information
+* `contents`: For auto tags and creating a release
+* `packages`: For pushing to a GH package repo
+
 ## Inputs (all optional)
 ### `josm-revision`
 The JOSM revision to use, defaults to an empty string (`''`). This uses the