### Proposed changes
This PR adds a new Makefile target `make sign-goreleaser-exe` target to
sign all built GoReleaser windows binaries. This PR contains 2 changes:
- Makefile target
- Copied ci-mgmt workflow files for validation purposes (generated from:
https://github.com/pulumi/ci-mgmt/pull/1318)
Please see the linked ci-mgmt issue for status of GitHub actions
workflows to validate that the binaries are signed.
2fdcae409d