root/pypi: links for sigstore-python