fix(chart): actually use debug value from configmap

feat(chart): make watchman-checks configurable

fix: trigger release

chore(ci): fix chart testing

fix(ci): add missing docker login to release helm chart

fix(release): fix attaching SBOM attestations

ci(release): is now multiple steps that can run in paralell

fix: use v0.2.3 of container-scanning-action

feat(images): container metadata

fix(ci/release): use ghcr.io instead of docker.io

fix(ci): setup cosign correctly and sign images using github oidc token