I'm trying to collect stats on clients using https://<TUF_REPO>/timestamp.json (since that should be the one static url both signing and verifying clients hit regularly).

sigstore-java seems to use user-agent Google-HTTP-Java-Client/1.47.1 (gzip) for these requests even though it uses sigstoreJavaClient/2.0.0-rc2-SNAPSHOT grpc-java-netty/1.71.0 in other requests (like fulcio and rekor). Would be good to use the latter consistently.