fix: upgrade cosign and cosign installer action (#118)

* fix: upgrade cosign and cosign installer action

#117

* fix: test cosign install

* fix: squash me

Confirmed `Install cosign` step works

Author: gdsmith1

.github/workflows/docker-publish.yml

@@ -34,9 +34,9 @@ jobs:
 
       - name: Install cosign
         if: github.event_name != 'pull_request'
-        uses: sigstore/cosign-installer@9becc617647dfa20ae7b1151972e9b3a2c338a2b #v2.8.1
+        uses: sigstore/cosign-installer@d9374b96fed791ab117111a9a307a92b68bf3145 #v3.9.1
         with:
-          cosign-release: 'v1.13.1'
+          cosign-release: 'v2.5.2'
 
       - name: Setup Docker buildx
         uses: docker/setup-buildx-action@79abd3f86f79a9d68a23c75a09a9a85889262adf