docker: registry.redhat.io: use-sigstore-attachments: true