[MGPG-130] Update sigstore extension for exclusion

Sigstore uses ".sigstore.json" extension in all our plugins, ".sigstore" is legacy

src/main/java/org/apache/maven/plugins/gpg/FilesCollector.java

@@ -41,8 +41,9 @@
 public class FilesCollector {
     private final MavenProject project;
 
-    private static final String[] DEFAULT_EXCLUDES =
-            new String[] {"**/*.md5", "**/*.sha1", "**/*.sha256", "**/*.sha512", "**/*.asc", "**/*.sigstore"};
+    private static final String[] DEFAULT_EXCLUDES = new String[] {
+        "**/*.md5", "**/*.sha1", "**/*.sha256", "**/*.sha512", "**/*.asc", "**/.sigstore.json", "**/*.sigstore.json"
+    };
 
     private final String[] excludes;