secant

This is a fork of cosign with the intention of escaping dependency hell.

There are many things still wrong with this dependency graph, but it is better.

The API is not stable.