ci/cd: accommodate changes in cosign cli

[mohammed90]

We need to update our usage of cosign before merging this, otherwise the release flow will fail.

Reference: sigstore/cosign#4354, also see discussion on #7536

Originally posted by @mohammed90 in #7375 (comment)