chore: bump sigstore in the production-dependencies group

Bumps the production-dependencies group with 1 update: [sigstore](https://github.com/sigstore/sigstore-js).


Updates `sigstore` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@3.0.0...sigstore@3.1.0)

---
updated-dependencies:
- dependency-name: sigstore
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

package.json

@@ -53,7 +53,7 @@
     "pino-pretty": "13.0.0",
     "prom-client": "15.1.3",
     "ramda": "0.30.1",
-    "sigstore": "3.0.0"
+    "sigstore": "3.1.0"
   },
   "devDependencies": {
     "@commitlint/cli": "19.7.1",