* Add cosign binary to sign and verify artifacts
* Update s3cmd to 2.3.0