devsecops update

[day0hero]

Updated devsecops applications:
cosign:

• updated the script that cosign uses to generate the public key to sign objects
• created service account, and rbac to support cosign job

spring-petclinic:

• The CI was failing bc the spring-petclinic application was pointing to the deployed quay registry.
• converted the helm chart to kustomize to align with original application and to support pipeline promotion

[ipbabble]

LGTM.