The OOTB e-mail service only supports adding an attachment that consists of a file located on the file system of the BPM server. There are other toolkits in the ecosystem that have a more sophisticated mail interaction, but as this question is specifically asking about OOTB that is the only answer in IBM BPM Standard.
In a multi-server system I would recommend that the file be located on a shared resource like a network drive.