feat(build): sigstore publishing plugin

This changeset adds the Maven Sigstore plugin for use during
publishing to Sonatype and other public repositories.

- chore: add sigstore plugin to build

Signed-off-by: Sam Gammon <[email protected]>

Author: sgammon

pom.xml

@@ -328,6 +328,19 @@
         <id>sonatype-oss-release</id>
         <build>
           <plugins>
+            <plugin>
+              <groupId>dev.sigstore</groupId>
+              <artifactId>sigstore-maven-plugin</artifactId>
+              <version>0.4.0</version>
+              <executions>
+                <execution>
+                  <id>sign</id>
+                  <goals>
+                    <goal>sign</goal>
+                  </goals>
+                </execution>
+              </executions>
+            </plugin>
             <plugin>
               <artifactId>maven-gpg-plugin</artifactId>
               <version>3.0.1</version>