goreleaser: Add support for new cosign bundle and update archives format config (#115)

This fixes the
[failure](https://github.com/qubesome/cli/actions/runs/19069106283) in
the release pipeline.

Author: pjbgf

.goreleaser.yaml

@@ -19,18 +19,16 @@ builds:
       - CGO_ENABLED=0
 
 archives:
-  - id: default
-    format: binary
+  - formats: [ 'binary' ]
 
 signs:
   - cmd: cosign
-    certificate: '${artifact}.pem'
+    signature: "${artifact}.sigstore.json"
     args:
       - sign-blob
       - '--yes'
-      - '--output-signature=${signature}'
-      - '--output-certificate=${certificate}'
-      - '--bundle=${artifact}.bundle'
+      - '--new-bundle-format=true'
+      - '--bundle=${signature}'
       - '${artifact}'
     artifacts: checksum
     output: true
@@ -44,7 +42,3 @@ sboms:
     artifacts: source
     documents:
       - '{{ .ProjectName }}_{{ .Version }}_sbom.spdx.json'
-
-release:
-  extra_files:
-    - glob: ./**/*.bundle