fix: TUF error in GHA installer

[laurentsimon]

Signed-off-by: laurentsimon laurentsimon@google.com

[laurentsimon]

Please verify that the hash I updated corresponds to the one in the SLSA provenance.

[asraa]

Verified the provenance and double checked

[
  {
    "name": "slsa-verifier-linux-amd64",
    "digest": {
      "sha256": "8d2e93a9ea0126d5daec22f2778b42fea79192605d16955f0c91847c3a6a8921"
    }
  }
]

also validated that the 2.0.0 release downloaded built at the gitcommit of the release

$ ~/Downloads/slsa-verifier-linux-amd64 version
  ____    _       ____       _             __     __  _____   ____    ___   _____   ___   _____   ____
 / ___|  | |     / ___|     / \            \ \   / / | ____| |  _ \  |_ _| |  ___| |_ _| | ____| |  _ \
 \___ \  | |     \___ \    / _ \    _____   \ \ / /  |  _|   | |_) |  | |  | |_     | |  |  _|   | |_) |
  ___) | | |___   ___) |  / ___ \  |_____|   \ V /   | |___  |  _ <   | |  |  _|    | |  | |___  |  _ <
 |____/  |_____| |____/  /_/   \_\            \_/    |_____| |_| \_\ |___| |_|     |___| |_____| |_| \_\
slsa-verifier: Verify SLSA provenance for Github Actions

GitVersion:    
GitCommit:     128324f48837d274fdb69870704477a8d2645b8d
GitTreeState:  clean
BuildDate:     2022-11-30T21:35:33
GoVersion:     go1.18.8
Compiler:      gc
Platform:      linux/amd64