imp - Roll out hash sum in changelogs

---

As we promised yesterday, we've started rolling out hash sums in the releases section.

---

Type: imp
Breaking: False
Doc Required: False
Backport Required: False
Part: 1/1

.github/workflows/release.yml

@@ -10,7 +10,9 @@ jobs:
 
     runs-on: ubuntu-latest
     permissions:
+      id-token: write
       contents: write
+      attestations: write
     steps:
       - uses: actions/checkout@v4
         with:
@@ -32,6 +34,7 @@ jobs:
           echo "SUBJECT=$(cat CHANGES.TITLE)" >> "$GITHUB_OUTPUT"
           echo 'BODY<<EOF' >> "$GITHUB_OUTPUT"
           cat CHANGES >> "$GITHUB_OUTPUT"
+          sha256sum tools/*.zip | sed -e 's/^/- /g' >> "$GITHUB_OUTPUT"
           echo 'EOF' >> "$GITHUB_OUTPUT"
       - name: Binary Attestation
         uses: actions/attest-build-provenance@v1
@@ -40,7 +43,7 @@ jobs:
       - name: Release Making
         uses: softprops/action-gh-release@v2
         with:
-          body_path: CHANGES
+          body: ${{ steps.release-asset.outputs.BODY }}
           name: ${{ steps.release-asset.outputs.SUBJECT }}
           files: |
             tools/*.zip

CHANGES

@@ -17,3 +17,8 @@ Review the commit history if you want to get a deep insight about the changes.
 ### Feedback?
 
 If you have issues with this version, report to us by [making a new issue ticket](https://github.com/Aptivi/VisualCard/issues/new).
+
+### Sum hashes
+
+To verify integrity of your download, compare the SHA256 sum of your downloaded file with the following information:
+