Sign the published docker image using [cosign](https://docs.sigstore.dev/).