chore: bump github.com/in-toto/go-witness from 0.3.1 to 0.4.0 (#278)

chore: bump github.com/in-toto/go-witness from 0.3.1 to 0.4.0 (#278) #349