setup cosign auth in production settings