chore(deps): update gcr.io/projectsigstore/cosign docker tag to v2.2.2

This MR contains the following updates:

Package	Update	Change
gcr.io/projectsigstore/cosign	patch	v2.2.1 -> v2.2.2

---

Configuration

Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot. The local configuration can be found in the SI Renovate Bot repository.

images/mirror/Earthfile

@@ -29,7 +29,7 @@ fedora:
     DO +MIRROR --image=quay.io/fedora/fedora:39@sha256:490a2eb8c9ae75eb4f1cef7cd6bcd73c3fcc00e1a4822d3be592ff917b1353cf
 
 cosign:
-    DO +MIRROR --image=gcr.io/projectsigstore/cosign:v2.2.1
+    DO +MIRROR --image=gcr.io/projectsigstore/cosign:v2.2.2
     SAVE ARTIFACT /ko-app/cosign ./cosign
 
 # verify-distroless allows to use cosign to verify all mirrored distroless images against Google's build identity