ci: publish OCI artifacts

[damacus]

Summary

Publish this cookbook's release artefacts as OCI images through the shared Sous Chefs release workflow.

• Update Sous Chefs shared workflow and action references to @main.
• Enable publish_oci: true.
• Grant the release workflow the required package and attestation permissions while preserving the existing release secrets.

Verification

• /opt/homebrew/bin/actionlint
• git diff --check

Risks / follow-ups

OCI publication runs only when the release workflow is triggered on main.

[github-actions]

Slowest examples

Top 10 slowest examples (1.05 seconds, 48.72% of total time)

Example	Description	Time in seconds
spec/unit/recipes/mailer_spec.rb:48	haproxy_mailer create a mailer, frontend and backend and verify config is created properly is expected to render file "/etc/haproxy/haproxy.cfg"	0.20189
spec/unit/recipes/install_spec.rb:59	haproxy_install compile HAProxy on AlmaLinux 10 (uses PCRE2) is expected not to install package "pcre-devel"	0.12372
spec/unit/recipes/defaults_spec.rb:26	haproxy_config_defaults create a cache, frontend and backend and verify config is created properly is expected to render file "/etc/haproxy/haproxy.cfg"	0.12205
spec/unit/recipes/install_spec.rb:30	haproxy_install compile HAProxy on Ubuntu is expected to install package "["libpcre3-dev", "libssl-dev", "zlib1g-dev", "libsystemd-dev"]"	0.11291
spec/unit/recipes/cache_spec.rb:45	haproxy_cache create a cache, frontend and backend and verify config is created properly is expected to render file "/etc/haproxy/haproxy.cfg"	0.1112
spec/unit/recipes/peer_spec.rb:45	haproxy_peer create a peers section, frontend and backend and verify config is created properly is expected to render file "/etc/haproxy/haproxy.cfg"	0.07732
spec/unit/recipes/listen_spec.rb:105	haproxy_listen extra options http-request rule should be placed before use_backend rule is expected to render file "/etc/haproxy/haproxy.cfg"	0.0762
spec/unit/recipes/listen_spec.rb:61	haproxy_listen option parameter with array of options is expected to render file "/etc/haproxy/haproxy.cfg"	0.07612
spec/unit/recipes/listen_spec.rb:39	haproxy_listen create template with a listen resource is expected to render file "/etc/haproxy/haproxy.cfg"	0.07603
spec/unit/recipes/listen_spec.rb:82	haproxy_listen extra options hash with disabled option is expected to render file "/etc/haproxy/haproxy.cfg"	0.07286