fix: address Sigstore's TUF repository changes

The Sigstore's TUF repository changed format, causing the verification
capabilities to break.

This commit bumps the `policy-evaluator` crate, which brings a patched
version of `sigstore-rs` as dependency.

Signed-off-by: Flavio Castelli <fcastelli@suse.com>

Author: flavio