sigstore Policy Controller Vulnerabilities