Run sigstore conformance test suite

Ideally we'd like to be fully Sigstore conformant eventually; 

https://github.com/sigstore/sigstore-conformance

Mentioned https://phpc.social/@glaubinix/115836888436376743

Would likely depend on #20 (add basic CLI interface) to be done first.