ci: 💚 disable pypi aattestations production and upload

They do no seem to work with reusable workflows (see the issues in the comment)

.github/workflows/pypi-release.yml

@@ -1,6 +1,8 @@
 name: Release Python package to PyPI
 
 on:
+  # TODO(@zoido): Remove pull_request when latest version is uploaded.
+  pull_request:
   workflow_call:
 
 jobs:
@@ -35,3 +37,9 @@ jobs:
           verify-metadata: false
           verbose: true
           print-hash: true
+
+          # Attentions are disabled temporarily. They do seem to work with the
+          # reusable wokrflow.
+          # - https://github.com/pypa/gh-action-pypi-publish/issues/166
+          # - https://github.com/pypa/gh-action-pypi-publish/issues/283
+          attestations: false