wking/cosign

Code signing and transparency for containers and binaries