Allow wildcards / globs also for multiple `subject-path`s

[sschuberth]

The action does not find these paths, see this error, although the step before does find the same paths, so something seems to be wrong with wildcard / glob expansion and multiple paths.

[nmwael]

I have similar problems..

[bdehamer]

Unfortunately, the @actions/glob package we're using for glob support doesn't support curly brackets (for reasons I don't understand, this appears to be a very intentional decision).

I see that there is an open issue asking for curly bracket support to be added -- you might throw a +1 on there to help it get some attention.

[nmwael]

for me it was not clear, It might be worth while to mention that the current workaround are one glob search per attestation in the documentation..