sigstore class to sign and verify buildkit provenance blobs#820

crazy-max merged 3 commits intodocker:maindocker/actions-toolkit:mainfrom

crazy-max:signingcrazy-max/docker-actions-toolkit:signingCopy head branch name to clipboard