Sign the Macaron release container using Cosign

[behnazh-w]

[behnazh-w]

We currently ask users to run curl + exec to install the release image which is a bad practice. We should use Cosign instead to sign the image and check that before running the container.