fix: upgrade sigstore from 1.5.2 to 1.9.0

Snyk has created this PR to upgrade sigstore from 1.5.2 to 1.9.0.

See this package in npm:
https://www.npmjs.com/package/sigstore

See this project in Snyk:
https://app.snyk.io/org/sammyfilly/project/369a5754-239e-4cb2-bb59-1d64d9535232?utm_source=github&utm_medium=referral&page=upgrade-pr

Author: snyk-bot