Pubtools-quay

* Fix SBOM publishing for the ML merge workflow
* Remove incompleteness_reasons field from SBOMs before publishing them

* Signing via pubtools-sign
* Instrument tracing for container push by zxiong in https://github.com/release-engineering/pubtools-quay/pull/201
* Add static typing to pubtools-quay by querti in https://github.com/release-engineering/pubtools-quay/pull/203
* Add option to disable sending transparency logs to rekor by querti in https://github.com/release-engineering/pubtools-
* Full Changelog: https://github.com/release-engineering/pubtools-quay/compare/v0.18.0...v0.19.0

* Generate SBOM attestations for manifest lists

* Should not call IIB if bundle is opted in fbc and targets OCP

* Instrument tracing for container push
* Add option to disable sending transparency logs to rekor

* End task when IIB request fails
* Set AWS KMS credentials from target settings
* Fix a bug where 0 IIB builds cause a push to fail