add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)

add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464) #7275