Fixed
- Verification now compares the distribution filenames of artifacts
and attestations by parsing them first and comparing its components
(i.e. normalized name, version, tags) instead of doing a filename
string comparison. This fixes an issue where verification would fail
due to the artifact filename having the wheel tags in a different
order than the ones in the attestation.
(#127)