feat(ci): update GitHub Actions to use cosign for container signing

Updated the GitHub Actions workflow to use `cosign` instead of `codesign` for container image signing. This change ensures that the correct container signature framework is being used, aligning with security best practices.

Additionally, integrated MQTT environment variables into the Dockerfile for the `double-take-beta` service. Now the MQTT host, username, and password are set at runtime from the Home Assistant services configuration.

Enabled Home Assistant's API (`homeassistant_api`) and Supervisor API (`hassio_api`) in the `double-take-beta` add-on configuration to allow for better integration with the Home Assistant ecosystem.

.github/workflows/publish.yml

@@ -36,4 +36,4 @@ jobs:
             -i hassio-addon-${{ matrix.target }}-{arch} \
             --target ${{ matrix.target }} \
             --docker-hub ghcr.io/${{ secrets.DOCKER_USERNAME }} \
-            --codesign
+            --cosign

double-take-beta/Dockerfile

@@ -61,6 +61,9 @@ export CONFIG_PATH=$(bashio::config 'CONFIG_PATH')
 export SECRETS_PATH=$(bashio::config 'SECRETS_PATH')
 export MEDIA_PATH=$(bashio::config 'MEDIA_PATH')
 export IPFILTER=$(cat /data/options.json | jq '.IPFILTER')
+export MQTT_HOST=$(bashio::services mqtt "host")
+export MQTT_USER=$(bashio::services mqtt "username")
+export MQTT_PASSWORD=$(bashio::services mqtt "password")
 
 cd /double-take && /bin/bash ./entrypoint.sh
 EOT

double-take-beta/config.yaml

@@ -15,6 +15,8 @@ ingress: true
 tmpfs: true
 init: false
 full_access: false
+homeassistant_api: true
+hassio_api: true
 privileged:
   - SYS_ADMIN
 ingress_port: 3000