fix: retry cosign signing so one timeout does not lose a release (#1316)