Set bundleVerified to true after Rekor verification (Resolves #3740)

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>

pkg/cosign/verify.go

@@ -710,6 +710,7 @@ func verifyInternal(ctx context.Context, sig oci.Signature, h v1.Hash,
 			}
 			t := time.Unix(*e.IntegratedTime, 0)
 			acceptableRekorBundleTime = &t
+			bundleVerified = true
 		}
 	}