Support different verification options per image

[ribbybibby]

Different images will require different verification options. This PR adds configuration that allows you to define different 'verifiers' for specific image references, or image reference patterns.

At the moment it supports verification by public key, or rekor URL, but should probably be expanded to include roughly the same options as cosign verify.