Bug#990249: RFP: rekor -- CLI & Server to use sigstore

[Sylvestre Ledru <sylvestre@debian.org>]

Package: wnpp
Severity: wishlist

* Package name    : rekor
* URL             : https://sigstore.dev/
* License         : Apache 2
  Programming Lang: Go
  Description     : CLI & Server to use sigstore

Sources:
https://github.com/sigstore/rekor

sigtore is a project pushed by the linux foundation to
"provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain"

The CLI doc is pretty good:
https://sigstore.dev/get_started/client/

I think we can start with the cli first.

As I don't know much about go packaging, I am not going to give it a try but I
would appreciate if someone from the go team could give it a try :)