feat: Add keyless Cosign Image Signing, backport changes from argoproj/argo-workflows

[korenyoni]

• Add keyless Cosign Signing for OCI container images
• Add keyless Cosign for misc assets, including sbom and checksums
• Refactor release workflow secret references (DOCKERIO_ORG previously contained quay.io org... this PR undoes that and instead uses vars.QUAYIO_ORG)
• Backport windows Dockerfile from argoproj/argo-workflows
• Backport checksums Makefile target from argoproj/argo-workflows

https://github.com/codefresh-sandbox/argo-workflows/actions/runs/5713351409

Please do not open a pull request until you have checked ALL of these:

• Create the PR as draft .
• Run make pre-commit -B to fix codegen and lint problems.
• Sign-off your commits (otherwise the DCO check will fail).
• Use a conventional commit message (otherwise the commit message check will fail).
• "Fixes #" is in both the PR title (for release notes) and this description (to automatically link and close the issue).
• Add unit or e2e tests. Say how you tested your changes. If you changed the UI, attach screenshots.
• Github checks are green.
• Once required tests have passed, mark your PR "Ready for review".

If changes were requested, and you've made them, dismiss the review to get it reviewed again.