feat: add suzuki-shunsuke/deny-self-approve (#30904)

* feat(suzuki-shunsuke/deny-self-approve): scaffold suzuki-shunsuke/deny-self-approve

* fix(suzuki-shunsuke/deny-self-approve): configure slsa_provenance and cosign

pkgs/suzuki-shunsuke/deny-self-approve/pkg.yaml

@@ -0,0 +1,2 @@
+packages:
+  - name: suzuki-shunsuke/[email protected]

pkgs/suzuki-shunsuke/deny-self-approve/registry.yaml

@@ -0,0 +1,31 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/aquaproj/aqua/main/json-schema/registry.json
+packages:
+  - type: github_release
+    repo_owner: suzuki-shunsuke
+    repo_name: deny-self-approve
+    description: CLI to deny self-approved GitHub Pull Requests
+    version_constraint: "false"
+    version_overrides:
+      - version_constraint: "true"
+        asset: deny-self-approve_{{.OS}}_{{.Arch}}.{{.Format}}
+        format: tar.gz
+        slsa_provenance:
+          type: github_release
+          asset: multiple.intoto.jsonl
+        checksum:
+          type: github_release
+          asset: deny-self-approve_{{trimV .Version}}_checksums.txt
+          algorithm: sha256
+          cosign:
+            opts:
+              - --certificate-identity-regexp
+              - "https://github\\.com/suzuki-shunsuke/go-release-workflow/\\.github/workflows/release\\.yaml@.*"
+              - --certificate-oidc-issuer
+              - "https://token.actions.githubusercontent.com"
+              - --signature
+              - https://github.com/suzuki-shunsuke/deny-self-approve/releases/download/{{.Version}}/deny-self-approve_{{trimV .Version}}_checksums.txt.sig
+              - --certificate
+              - https://github.com/suzuki-shunsuke/deny-self-approve/releases/download/{{.Version}}/deny-self-approve_{{trimV .Version}}_checksums.txt.pem
+        overrides:
+          - goos: windows
+            format: zip