Bump cosign v2.4.1 to v3.0.4 and use trusted_root.json for verification #3108

Namespace: <a href="https://konflux-ui.apps.stone-prd-rh01.pg1f.p1.openshiftapps.com/ns/rhtap-contract-tenant" rel="nofollow">rhtap-contract-tenant
PipelineRun: <a href="https://konflux-ui.apps.stone-prd-rh01.pg1f.p1.openshiftapps.com/ns/rhtap-contract-tenant/pipelinerun/cli-main-on-pull-request-jcjf9" rel="nofollow">cli-main-on-pull-request-jcjf9

Success

Red Hat Konflux/cli-main-on-pull-request has successfully validated your commit.

Status	Duration	Name
🟢 Succeeded	10 seconds	init
🟢 Succeeded	10 seconds	clone-repository
🟢 Succeeded	2 minutes	prefetch-dependencies
🟢 Succeeded	6 minutes	build-container
🟢 Succeeded	16 seconds	build-image-index
🟢 Succeeded	27 seconds	clair-scan
🟢 Succeeded	34 seconds	sast-snyk-check
🟢 Succeeded	10 seconds	push-dockerfile
🟢 Succeeded	6 seconds	apply-tags
🟢 Succeeded	1 minute	build-source-image
🟢 Succeeded	12 seconds	rpms-signature-scan
🟢 Succeeded	20 seconds	deprecated-base-image-check
🟢 Succeeded	32 seconds	ecosystem-cert-preflight-checks
🟢 Succeeded	41 seconds	clamav-scan
🟢 Succeeded	23 seconds	sast-shell-check
🟢 Succeeded	23 seconds	sast-unicode-check
🟢 Succeeded	8 seconds	build-tekton-bundle