Bump sigstore from 3.5.3 to 3.6.0

Bumps [sigstore](https://github.com/sigstore/sigstore-python) from 3.5.3 to 3.6.0.
- [Release notes](https://github.com/sigstore/sigstore-python/releases)
- [Changelog](https://github.com/sigstore/sigstore-python/blob/main/CHANGELOG.md)
- [Commits](sigstore/sigstore-python@v3.5.3...v3.6.0)

---
updated-dependencies:
- dependency-name: sigstore
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

mypy-requirements.txt

@@ -4,6 +4,6 @@ mypy==1.14.1
 pytest
 pytest-mock
 python-gnupg  # untyped :(
-sigstore==3.5.3
+sigstore==3.6.0
 types-paramiko
 types-requests