Fix cosign install part of the release pipeline (#1362)

* Apparently old location for cosign binaries is not valid anymore
* Update to the latest https://github.com/sigstore/cosign-installer/releases/tag/v3.3.0
* Fixes #1361
* Tested in the fork https://github.com/ytsarev/k8gb/actions/runs/7266564082/job/19798553048
  Notice that 'Install Cosign' step is passing there

Signed-off-by: Yury Tsarev <yury@upbound.io>

.github/workflows/release.yaml

@@ -48,7 +48,7 @@ jobs:
           filterByMilestone: true
           unreleased: true
       - name: Install Cosign
-        uses: sigstore/cosign-installer@ced07f21fb1da67979f539bbc6304c16c0677e76 # renovate: tag=v2.7.0
+        uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # renovate: tag=v3.3.0
         with:
           cosign-release: 'v1.12.1'
       - name: Install Syft