* only ignore project-root/store not all store paths * remove embedded cosign binary in favor of fork library