Bump sigstore from 3.5.3 to 3.6.0 (#210)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

mypy-requirements.txt

@@ -4,6 +4,6 @@ mypy==1.14.1
 pytest
 pytest-mock
 python-gnupg  # untyped :(
-sigstore==3.5.3
+sigstore==3.6.0
 types-paramiko
 types-requests