v1.0.5

This fixes issue #325. Sigstore root metadata was updated to a key format incompatible with old go-tuf (the underlying TUF client) libraries. This updated sigstore libraries to new ones that pulled in the updated go-tuf libraries.

What's Changed

• Backport release/v1.0: Update sigstore libraries by @ianlewis in #332
• release/v1.0: update release builder by @asraa in #336
• release/v1.0: fix release workflow permissions by @asraa in #337

Full Changelog: v1.0.4...v1.0.5