Split out from https://issues.redhat.com/browse/RHELAI-799 and more directly: https://github.com/containers/skopeo/pull/2400
We want bootc (and rpm-ostree) to match what podman/skopeo do in supporting images which just have a per-manifest signature.