update cosign.md tutorial

fixes a number of issues with the documentation including doc strings, image refs, attestation types, keys, commands, and indents

testing:

• checked via local docker run