Once the rekor2 instance is added to signingconfig, this action will start producing bundles with rekor2 entries.

Since some clients do not yet support rekor2 when verifying, maybe we should allow forcing the rekor version to 1 with an action argument when signing.

I will take a look tomorrow