Mirror attestations during BCR post-submit. (#2185) Progress towards https://github.com/bazelbuild/continuous-integration/issues/2177