Reduce dependency graph if possible for Rekor v2

[haydentherapper]

Description

With the support for Rekor v2 (#481), we pulled in a number of external dependencies, as noted on sigstore/cosign#4280 (comment). We should see how we can reduce dependencies, particularly the large GCP dependencies.