`gh attestation verify` said yes to an image we never released

The four questions, and the one nobody asks Pulling a container image somebody else built...