fix: remove stderr suppression from cosign in instance component

Cosign sign/attest failures were hidden by 2>/dev/null. Removed so
errors are visible in CI logs.