Bump cosign v2.4.1 to v3.0.4 and use trusted_root.json for verification#3108

simonbaird merged 1 commit intoconforma:mainconforma/cli:mainfrom

SequeI:bumpCosignSequeI/cli:bumpCosignCopy head branch name to clipboard