We should do a release for #215 and #213. we could also consider exposing `--rekor-version` in the action, unsure if that's useful or just bloat
