fix(workflows): bump versions for publishing pipeline

[asdfgugus]

Use latest version of sigstore/cosign-installer to fix publisher pipeline. There was a breaking change in version v3.0.0.