Sigstore Cosign

Sigstore's Cosign CLI tool show expose flags to override root TUF endpoints set when initialised. We're all for cleaner commands !