Image catalogs should be signed with cosign, similar to what we have done with https://github.com/cloudnative-pg/cloudnative-pg/pull/10067