fix: use sigstore-go TUF client for verify to match initialize#293

SequeI merged 1 commit into

mainsecuresign/gitsign:mainfrom

fix/use-sigstore-go-tuf-for-verifysecuresign/gitsign:fix/use-sigstore-go-tuf-for-verifyCopy head branch name to clipboard