SNOW-685438: Sign artifacts before publish

[sfc-gh-anavalos]

Please answer these questions before submitting your pull requests. Thanks!

1. What GitHub issue is this PR addressing? Make sure that there is an accompanying issue to your PR.

   Fixes #NNNN

2. Fill out the following pre-review checklist:

   • [ ] I am adding a new automated test(s) to verify correctness of my new code
   • [ ] I am adding new logging messages
   • [ ] I am adding new credentials
   • [ ] I am adding a new dependency

3. Please describe how your code solves the related issue.

   Please write a short description of how your code change solves the related issue. Signing artifacts with cosign before publishing them. The signing has the next steps:

• sign artifacts
• verify signature using bundle file
• verify signature using public certificate and public key
• copy artifacts to the release tag