Add configurable default remote (#160)

* Add configurable default remote

* Clarify remote flag help

* Test configured remote end to end

Add GitHub commit resolver (#150)

* Add GitHub commit resolver

* Validate resolved commit SHAs

Bump github.com/git-pkgs/purl from 0.1.15 to 0.1.16 (#149)

Bump actions/setup-go from 6.4.0 to 6.5.0 (#128)

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@4a36011...924ae3a)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Fix browse <path> URL on non-GitHub forges (#96)

Bump git-pkgs/purl to v0.1.12

Use cosign v4 bundle format for release signing (#69)