refactor(ci): allow release when provenance generation fails

[behnazh]

This PR decouples the release and provenance generation and allows the release to proceed even if provenance generation fails.

[jenstroeger]

Two questions, and w00t 🥳

[jenstroeger]

One thought below, but looks good 👍🏼

To be sure, even if the provenance job fails, we’ve still created a Release on Github with all its artifacts. The whole workflow can still fail, though, if the provenance job or the publish_provenance job fails?

[behnazh]

To be sure, even if the provenance job fails, we’ve still created a Release on Github with all its artifacts. The whole workflow can still fail, though, if the provenance job or the publish_provenance job fails?

That's correct. The version will be bumped, the tag and release will be created, and all the assets except for provenance will be uploaded when provenance generation fails. But the run itself will be shown as failed. I think that's good though to be aware that the provenance is missing.