Workflow is currently breaking because there are multiple versions of signtool
installed on runners. We face a challenge where we either hardcode this to a
specific version on the runner or always choose the latest version; this change
does the latter.