Disable attestations in pypi-publish workflow

[astrofrog]

This might fix https://github.com/OpenAstronomy/github-actions-workflows/issues/136 for now - some of my packages are currently failing at the upload step. I'll test this out to confirm it works.

[astrofrog]

Hmm this doesn't work