This MR bumps CI_TOOLS_VERSION tag to 5.8.0 which
includes the new version of cosign needed to
make the `rekor` subcomponent happy.