Revert @actions/attest http-client dependency to ^2.2.3

Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>

package.json

@@ -44,7 +44,7 @@
   "dependencies": {
     "@actions/core": "^1.11.1",
     "@actions/github": "^6.0.0",
-    "@actions/http-client": "^3.0.1",
+    "@actions/http-client": "^2.2.3",
     "@octokit/plugin-retry": "^6.0.1",
     "@sigstore/bundle": "^3.1.0",
     "@sigstore/sign": "^3.1.0",