add CertIdentity and CertOidcIssuer as check options to delegate the check for identity to Cosign's validation function.

[rodrigolc]

As per spiffe#3159 (comment)
To be implemented after initial release