ci: rewrite github action workflows

[tobiasehlert]

• [x] fix build cache
• [x] add permission block to all workflows
• [x] add sbom to images
• [x] use cosign to sign images
• [x] add annotations to build step