@Andriy Knysh (Cloud Posse) the new signature validation works well, but sometimes

cosign

has issues with something being malformed, causing tests to flap. But the good thing is we caught this before cutting a release. This PR makes it more robust, by retrying recoverable errors. Since it's very annoying when in CI toolchain installations fail for transient/recoverable errors. https://github.com/cloudposse/atmos/pull/2506