Sigstore Version 3 Support

[dorsma]

Sigstore version 3 has a BREAKING API CHANGE: VerificationMaterials has been removed.
The public verification APIs now accept sigstore.models.Bundle.

See: https://github.com/sigstore/sigstore-python/blob/30a74ed0a6306ba8f3cfe8add8c56953641b4ba6/CHANGELOG.md?plain=1#L252

However sigstore_verify.py is still using VerificationMaterials https://github.com/smallstep/ansible-collection-sigstore/blob/main/plugins/modules/sigstore_verify.py#L113C33-L113C54

Meaning, in order to use this ansible collection we need to force pip to install an older version of sigstore==2.1.5

Latest sigstore at time of this writing is sigstore-3.6.2