Attest: undo the @actions/github/@octokit bumps

package.json

@@ -43,11 +43,16 @@
   },
   "dependencies": {
     "@actions/core": "^2.0.2",
-    "@actions/github": "^8.0.1",
+    "@actions/github": "^7.0.0",
     "@actions/http-client": "^3.0.2",
-    "@octokit/plugin-retry": "^8.0.3",
+    "@octokit/plugin-retry": "^6.0.1",
     "@sigstore/bundle": "^3.1.0",
     "@sigstore/sign": "^3.1.0",
     "jose": "^5.10.0"
+  },
+  "overrides": {
+    "@octokit/plugin-retry": {
+      "@octokit/core": "^5.2.0"
+    }
   }
 }