v0.1.2 -- FIPS SLSA attestation on release page

Completes the release-page parity for FIPS variant:
- attest-fips job generates SLSA v1.0 provenance for assay-linux-amd64-fips
- add-security-assets now links the FIPS attestation from packages/generic/provenance/