BREAKING_CHANGE: output methods to save and push images are now part of the oci pkg
sign
verify --vsa
* Use receivers for manifest functions * Move SaveImage/SaveIndex from image-signing-verifier * Ignore test fixtures in coverage * Add AddImagesToIndex function
* Add e2e auth test