fix: use -a short flag for cosign annotations in instance component cosign sign with COSIGN_EXPERIMENTAL=1 rejects --annotation long flag. Use -a short flag, matching supply-chain component pattern.
fix: use -a short flag for cosign annotations in instance component cosign sign with COSIGN_EXPERIMENTAL=1 rejects --annotation long flag. Use -a short flag, matching supply-chain component pattern.