Use cosign to sign their images while pushing them to harbor.

[Pavan-Gunda]

Describe the bug Some documentation around why signing an image is worth their time and how to do it using cosign. Inspire from here