add --ca-roots and --ca-intermediates flags to 'cosign verify'

add --ca-roots and --ca-intermediates flags to 'cosign verify' #2779