[openSUSE/open-build-service] b42320: [backend] BSConSign: fix cosign attestation handling