Sign and notarize all released docker images.

[BMurri]

Problem:
Currently we a subset of the binaries built from our repos for the two docker images we release as part of these projects (TES & CoA). Those images are linux only, and codesigning anything for that platform that is not a deployment package (such as DEB or RPM) has no practical effect and is, in fact, not required by Microsoft.

Solution:
There now exists a specification and system in place to codesign entire images, allowing containers to potentially gain all of the security advantages that codesigning affords on OSX and Windows platforms. This should become part of our build/release workflows.

Describe alternatives you've considered
Doing nothing.

Code dependencies
Will this require code changes in:

• CoA, for new and/or existing deployments? Maybe
• TES, for new and/or existing deployments? Maybe
• Build pipeline? Maybe
• Integration tests? Maybe

Additional context
https://notaryproject.dev/
Related to #478