Update CLI config to differentiate cert type input

[junczhu]

What would you like to be added?

Update CLI configuration to differentiate cert type for notation trustStore type config
Which also match the behavior of K8S configuration

This can save verifier time from traversing all the certifications.

Anything else you would like to add?

No response

Are you willing to submit PRs to contribute to this feature?

• Yes, I am willing to implement it.