Use the Sigstore OIDC "beacon" for our tests

[woodruffw]

We should use https://github.com/sigstore-conformance/extremely-dangerous-public-oidc-beacon for our self-tests, to avoid GitHub's third-party PR restrictions.

[woodruffw]

This will improve the testing story for e.g. #110.