zk-Sigstore: System for Anonymous Certificate-Based Software Signing