This [README.md](https://github.com/sigstore/sigstore-java/blob/main/sigstore-maven-plugin/README.md) talks about avoiding checksum files for `.sigstore.java` files. Isn't it `.sigstore.json`? Cheers, Tom