New GitHub workflows

all-required-checks-complete

The problem this solves is that GitHub’s “required” checks are not actually required. A “required” step which is skipped because it depends on a failed step will count as successful. (This is folklore, but here’s one writeup.)

publish-nuget

NuGet does not lend itself to GitHub artefact attestation, so there’s some annoying work to do to make that happen. This action performs that work!