client tests do not cover npmjs delegation or artifact

[jku]

We could add anything in the npmjs delegation and the current tests will be fine

[jku]

this should obviously be done in staging first, maybe with sigstore/root-signing-staging#155