Update supply-chain-security.md: cosing to cosign typo fix

[mlulekindala]

Changes

Submitter Checklist

These are the criteria that every PR should meet, please check them off as you review them:

• [ ] Includes docs (if user facing)
• [x] Commit messages follow commit message best practices

See the contribution guide for more details.

[linux-foundation-easycla[bot]]

• :x: - login: @mlulekindala / name: Mluleki . The commit (52552817addd0a98fdd3a17d0a9b9aede450d722) is not authorized under a signed CLA. Please click here to be authorized. For further assistance with EasyCLA, please submit a support request ticket.

[tekton-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: To complete the pull request process, please assign alangreene after the PR has been reviewed. You can assign the PR to them by writing /assign @alangreene in a comment when ready.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - **[OWNERS](https://github.com/tektoncd/website/blob/main/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment