Eli Heady

@patschi what do you think about this? I am not sure blocking all of these records is the right thing, as it seems the characters are accepted if they are...

I started exploring this. My first take is to add a new job to the draft release workflow that calls the [generic SLSA generator](https://github.com/slsa-framework/slsa-github-generator/blob/v2.1.0/.github/workflows/generator_generic_slsa3.yml) workflow and signs the build artifacts...

https://github.com/eliheady/dnscontrol/blob/630cf003731c82f534c084670c41a04d547d4ba0/.github/workflows/release_draft.yml#L67-L84