feat: fetch sigstore data from remote TUF repo

Change the code to fetch the Rekor and Fulcio data from the sigstore TUF
repository.

Fixes issue #211

Signed-off-by: Flavio Castelli <fcastelli@suse.com>

Author: flavio