build(deps): bump @sigstore/tuf from 4.0.0 to 4.0.1

Bumps [@sigstore/tuf](https://github.com/sigstore/sigstore-js) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/tuf@4.0.0...@sigstore/sign@4.0.1)

---
updated-dependencies:
- dependency-name: "@sigstore/tuf"
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

package.json

@@ -58,7 +58,7 @@
     "@octokit/plugin-rest-endpoint-methods": "^10.4.1",
     "@sigstore/bundle": "^4.0.0",
     "@sigstore/sign": "^4.0.1",
-    "@sigstore/tuf": "^4.0.0",
+    "@sigstore/tuf": "^4.0.1",
     "@sigstore/verify": "^3.0.0",
     "async-retry": "^1.3.3",
     "csv-parse": "^6.1.0",