ci: Update cosign installer to 3.0.5

This updates the installer action to v3.0.5 and adjusts our local action
to the new calling interface.

.github/actions/container-image-publish/action.yml

@@ -57,7 +57,7 @@ runs:
     # https://github.com/sigstore/cosign-installer
     - name: Install cosign
       if: inputs.event != 'pull_request'
-      uses: sigstore/cosign-installer@v2.3.0
+      uses: sigstore/cosign-installer@v3.0.5
 
     # Workaround: https://github.com/docker/build-push-action/issues/461
     - name: Setup Docker buildx
@@ -142,10 +142,8 @@ runs:
     # https://github.com/sigstore/cosign
     - name: Sign the published Docker image
       if: ${{ inputs.event != 'pull_request' }}
-      env:
-        COSIGN_EXPERIMENTAL: "true"
       # This step uses the identity token to provision an ephemeral certificate
       # against the sigstore community Fulcio instance.
       shell: bash
-      run: cosign sign ${{ inputs.registry }}/${{ inputs.image_name }}@${{
+      run: cosign sign --yes ${{ inputs.registry }}/${{ inputs.image_name }}@${{
         steps.build-and-push.outputs.digest }}