CI add cosign and SBOM back

[SamYuan1990]

Target Version

Current version (0.10.0+) - New Architecture

Feature Description

ref #2214 (comment), after 0.10.0 the cosign and sbom were gone, due to new image publish logic relay on make script.

Problem Statement

same as feature description.

Proposed Solution

we should update push image pipeline to make cosign and sbom support back.

Alternatives Considered

No response

Additional Context

No response