It'd be nice if we had a default template for sigstore/gh-action-sigstore-python, so that all of our projects (at least the ones that do releases via GitHub) can gain codesigning for free.
Some catches:
- This might not be a good fit for a workflow template, since the signing step is conceptually a job within a larger "release" workflow rather than a standalone workflow