Add support for private sigstore instances

bnd has a bunch of customization options/flags but it needs to have a way to pass through flags (or env vars) the URIs of the sigstore instance, ie: fulcio and rekor URLs.

These should be common options of the signing subcommand. We probably should provide sane defaults for the sigstore and github public instances.