Sigstore signatures broken

[sgammon]

Issue description

The verification instructions for releases mention my account as the issuer value to properly verify a release. However, our automated release pipeline changed this identity, and so signatures are known to be broken, simply because we don't know the issuer value used within the pipeline.

Fix to instructions coming soon