Put metadata in annotations

Tooling for attestations is a bit crap

Author: dflook

.github/workflows/base-image.yaml

@@ -30,6 +30,8 @@ jobs:
           persist-credentials: false
 
       - name: Registry login
+        env:
+          DOCKER_TOKEN: ${{ secrets.DOCKER_TOKEN }}
         run: |
           echo $DOCKER_TOKEN | docker login --username danielflook --password-stdin