chore(deps): update dependency sigstore/cosign to v3

.gitea/workflows/release.yaml

@@ -113,23 +113,15 @@ jobs:
         env:
           GITEA_REGISTRY_TOKEN: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
         run: |
-          curl \
+          for package in "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz"*; do
-            --fail \
-            --show-error \
-            --request POST \
-            --user "${REPOSITORY_OWNER}:${GITEA_REGISTRY_TOKEN}" \
-            --upload-file "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz" \
-              https://${GITEA_SERVER_HOSTNAME}/api/packages/${REPOSITORY_OWNER}/helm/api/charts
-
-          if [ -f "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz.prov" ]; then
             curl \
               --fail \
               --show-error \
               --request POST \
-              --user "${CHARTMUSEUM_USERNAME}:${CHARTMUSEUM_PASSWORD}" \
+              --user "${REPOSITORY_OWNER}:${GITEA_REGISTRY_TOKEN}" \
-              --upload-file "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz.prov" \
+              --upload-file "${package}" \
-                https://${GITEA_SERVER_HOSTNAME}/api/packages/${REPOSITORY_OWNER}/helm/api/prov
+                https://${GITEA_SERVER_HOSTNAME}/api/packages/${REPOSITORY_OWNER}/helm/api/charts
-          fi
+          done
 
       - name: Upload Chart to Chartmuseum (Helm)
         env: