Fix indiekit docker container

And build only when needed

.github/workflows/indiekit-docker.yml

@@ -5,13 +5,14 @@ on:
     branches: ["main"]
     paths:
       - indiekit/**
+      - .github/workflows/indiekit-docker.yml
 
   workflow_dispatch:
 
 permissions:
   contents: read
   packages: write
-  attestations: write
+  id-token: write
 
 concurrency:
   group: "docker"
@@ -49,3 +50,9 @@ jobs:
           push: true
           tags: indiekit
           labels: ${{ steps.meta.outputs.labels }}
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true

.github/workflows/publish.yml

@@ -3,6 +3,10 @@ name: Deploy Hugo site to Pages
 on:
   push:
     branches: ["main"]
+    paths-ignore:
+      - indiekit/**
+      - .github/workflows/indiekit-docker.yml
+      - tools/**
   schedule:
     # Rebuild every day, to update 'year relative' dates, change now page & calendar
     - cron: '0 0 * * *'