astllc/production: links for sigstore-python