This change refactors the signing path in all signing and attestation commands such that all signing events occur via sigstore-go, not just those in which a signing config is used. Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>