Verify conndeck releases

Desktop Kubernetes tooling should be verifiable before it can administer production clusters.

Copy-paste command.

The release workflow replaces placeholder artifact names with real release files.

scripts/verify-release.sh conndeck artifact.provenance.json conndeck-sbom.cdx.json