Epic Goal

• Use kata 3.9.0 + CoCo 0.10.0 in downstream OSC

Why is this important?

• These versions are shipping the required code for supporting signed container images in CoCo. Now it also comes with additional features and changes that need some work (at least: test / documentation). This epic will be used to track and prioritize them. 

Additional context:

See https://docs.google.com/document/d/1srQ5jMpJ1bRQp9D96kLe3NCaQvEX7-6OHQNUoSYrcK4/edit for the original document