_cli: don't warn on bare .sigstore if cert/sig is used (#1179)

_cli: don't warn on bare .sigstore if cert/sig is used (#1179) #577