Signature of multi-platform manifest

Describe the bug

Multi-platform manifest is signed but not individual images.

Expected behavior

Both manifest hash and platform specific hash would work as digest

Actual behavior

So pinning the manifest hash as digest works but not pinning the platform

Note: additional care is need on copying signatures in publish job