trusted-root.json for dev-python/sigstore
