* ci: sign images and generate sbom
Signed-off-by: Yue Yang <g1enyy0ung@gmail.com>

* chore: update changelog
Signed-off-by: Yue Yang <g1enyy0ung@gmail.com>
Signed-off-by: Yue Yang <g1enyy0ung@gmail.com>
Co-authored-by: Yue Yang <g1enyy0ung@gmail.com>