kms: add 1password as a new KMS

[Dentrax]

Description

We (@developer-guy) propose to add a brand-new KMS for 1password!

They provides an official connect-sdk-go package that we can use in the kms package. Implementation would quite easy by taking advantage of aforementioned library. Unfortunately, 1password does not support ¹ generating ECDSA keys in-place. So we should generate it in-memory and upsert without writing to local filesystem.

Thank @wlynch for the idea! ²

/good-first-issue
/low-hanging-fruit

Footnotes

1. https://1password.community/discussion/127230/i-18-support-for-ecdsa-keys ↩

2. https://sigstore.slack.com/archives/C03ETLNSA3Z/p1692195519374149?thread_ts=1692195049.385139&cid=C03ETLNSA3Z ↩

[haydentherapper]

Hey, thanks for the suggestion. Per https://github.com/sigstore/sigstore/blob/main/POLICY.md#kms-providers, if there is significant community interest in this, then we would accept this. I'll leave this issue up for any discussion.