Common go library shared across sigstore services and clients (library)

 sigstore/sigstore is a generic library / framework that is utilized by
 various other clients and projects including fulcio (webPKI), cosign
 (container and OCI signing tool) and tektoncd/chains (Supply Chain
 Security in Tekton Pipelines).