API: `Attestation.sign` should not leak 3p exceptions

[woodruffw]

Right now, we probably do. We should make sure that any exceptions that come out of Attestation.sign get wrapped in AttestationError or an appropriate subtype.