Bump @sigstore/oci from 0.6.0 to 0.6.1 in the npm-production group

Bumps the npm-production group with 1 update: [@sigstore/oci](https://github.com/sigstore/sigstore-js).


Updates `@sigstore/oci` from 0.6.0 to 0.6.1
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/oci@0.6.0...@sigstore/oci@0.6.1)

---
updated-dependencies:
- dependency-name: "@sigstore/oci"
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

package-lock.json

@@ -82,7 +82,7 @@
     "@actions/core": "^3.0.0",
     "@actions/github": "^9.0.0",
     "@actions/glob": "^0.6.1",
-    "@sigstore/oci": "^0.6.0",
+    "@sigstore/oci": "^0.6.1",
     "csv-parse": "^5.6.0"
   },
   "devDependencies": {