chore: add support for cosign in release workflow

[remyleone]

Community Note

• Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for pull request followers and do not help prioritize the request

Relates OR Closes #0000

Release note for CHANGELOG:

[Copilot]

Pull request overview

Adds cosign installation to the tag-triggered GitHub Actions release workflow, presumably to enable artifact/image signing in the release pipeline.

Changes:

• Install cosign in the release job before publishing steps.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 50.41%. Comparing base (c963415) to head (f495060).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #5740   +/-   ##
=======================================
  Coverage   50.41%   50.41%           
=======================================
  Files         342      342           
  Lines       78508    78508           
=======================================
  Hits        39583    39583           
  Misses      37429    37429           
  Partials     1496     1496           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.